tux/nix-config
1
0
Fork 0
mirror of https://github.com/tuxdotrs/nix-config.git synced 2026-09-19 16:49:04 +05:30
Code Issues Actions Packages Projects Releases Wiki Activity

refactor(services): standardize host and proxy options

Browse Source
This commit is contained in:
tux
2026-08-09 18:18:26 +05:30
parent f801c6c88c
commit 9242347eaf
4 changed files with 94 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
modules/nixos/services/vaultwarden.nix
View File

@@ -15,6 +15,12 @@
options.tnix.services.vaultwarden = {
enable = mkEnableOption "Vaultwarden";
host = mkOption {
type = types.str;
default = "127.0.0.1";
description = "Host on which Vaultwarden listens";
};
port = mkOption {
type = types.port;
default = 8000;
@@ -24,17 +30,30 @@
domain = mkOption {
type = types.str;
default = "";
description = "Domain on which nginx serves Vaultwarden (disabled when empty)";
description = "Domain on which Vaultwarden is available";
};
configureNginx = mkOption {
type = types.bool;
default = false;
description = "Whether to configure Nginx as a reverse proxy for Vaultwarden";
};
};
config = mkIf cfg.enable {
assertions = [
{
assertion = cfg.domain != "";
message = "tnix.services.vaultwarden.domain must be set when tnix.services.vaultwarden.enable is true.";
}
];
services = {
vaultwarden = {
enable = true;
dbBackend = "postgresql";
config = {
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_ADDRESS = cfg.host;
ROCKET_PORT = cfg.port;
DOMAIN = "https://${cfg.domain}";
@@ -45,11 +64,11 @@
};
};
nginx.virtualHosts.${cfg.domain} = mkIf (cfg.domain != "") {
nginx.virtualHosts.${cfg.domain} = mkIf cfg.configureNginx {
forceSSL = acmeHost != "";
useACMEHost = mkIf (acmeHost != "") acmeHost;
locations."/" = {
proxyPass = "http://127.0.0.1:${port}";
proxyPass = "http://${cfg.host}:${port}";
proxyWebsockets = true;
};
};