add vaultwarden

modules/nixos/headscale.nix

@@ -1,6 +1,7 @@
 {
   config,
   pkgs,
+  lib,
   ...
 }: {
   security = {
@@ -40,7 +41,7 @@
     };
 
     nginx = {
-      enable = true;
+      enable = lib.mkForce true;
       virtualHosts = {
         "hs.0xtux.com" = {
           forceSSL = true;

modules/nixos/vaultwarden.nix

@@ -0,0 +1,29 @@
+{lib, ...}: {
+  services = {
+    vaultwarden = {
+      enable = true;
+      config = {
+        domain = "https://vault.0xtux.com";
+        enableWebsocket = true;
+        signupsAllowed = true;
+        disableIconDownload = true;
+      };
+    };
+
+    nginx = {
+      enable = lib.mkForce true;
+      virtualHosts = {
+        "vault.0xtux.com" = {
+          forceSSL = true;
+          enableACME = true;
+          locations = {
+            "/" = {
+              proxyPass = "http://localhost:8000";
+              proxyWebsockets = true;
+            };
+          };
+        };
+      };
+    };
+  };
+}