tux/nix-config
1
0
Fork 0
mirror of https://github.com/tuxdotrs/nix-config.git synced 2026-09-19 16:49:04 +05:30
Code Issues Actions Packages Projects Releases Wiki Activity

feat: add vaultwarden module

Browse Source
This commit is contained in:
tux
2026-08-07 04:13:42 +05:30
parent f0ba54b168
commit 82493de787
2 changed files with 74 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
modules/hosts/alpha/config.nix
View File

@@ -55,6 +55,12 @@
environmentFile = innerArgs.config.sops.secrets."mediaflow-proxy".path;
};
vaultwarden = {
enable = true;
port = 9999;
domain = "bw.lab.tux.rs";
};
};
virtualisation = {

68
modules/nixos/services/vaultwarden.nix Normal file
View File

@@ -0,0 +1,68 @@
{
flake.modules.nixos.services =
{
config,
lib,
...
}:
with lib;
let
cfg = config.tnix.services.vaultwarden;
in
{
options.tnix.services.vaultwarden = {
enable = mkEnableOption "Enable Vaultwarden";
port = mkOption {
type = types.int;
default = 8000;
};
domain = mkOption {
type = types.str;
default = "";
};
};
config = mkIf cfg.enable {
services = {
vaultwarden = {
enable = true;
dbBackend = "postgresql";
config = {
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = cfg.port;
DOMAIN = "https://${cfg.domain}";
DATABASE_URL = "postgresql:///vaultwarden?host=/run/postgresql";
ENABLE_WEBSOCKET = true;
SIGNUPS_ALLOWED = true;
DISABLE_ICON_DOWNLOAD = true;
};
};
nginx.virtualHosts.${cfg.domain} = {
forceSSL = true;
useACMEHost = "lab.tux.rs";
locations = {
"/" = {
proxyPass = "http://localhost:${toString cfg.port}";
proxyWebsockets = true;
};
};
};
postgresql = {
enable = true;
ensureDatabases = [ "vaultwarden" ];
ensureUsers = [
{
name = "vaultwarden";
ensureDBOwnership = true;
}
];
};
};
};
};
}