From a2257b8950c848f824a204974920aa9a1215751b Mon Sep 17 00:00:00 2001
From: Matei Adriel <rafaeladriel11@gmail.com>
Date: Sat, 10 Feb 2024 04:48:43 +0100
Subject: [PATCH] Fix vaultwarden data dir path

---
 hosts/nixos/lapetus/services/vaultwarden.nix | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/hosts/nixos/lapetus/services/vaultwarden.nix b/hosts/nixos/lapetus/services/vaultwarden.nix
index 6cabc8a..cbf7785 100644
--- a/hosts/nixos/lapetus/services/vaultwarden.nix
+++ b/hosts/nixos/lapetus/services/vaultwarden.nix
@@ -2,14 +2,13 @@
 let
   port = 8404;
   host = "warden.moonythm.dev";
-  dataDir = "/persist/state/var/lib/vaultwarden";
 in
 {
-  systemd.tmpfiles.rules = [ "d ${dataDir} 0700 vaultwarden vaultwarden -" ];
   sops.secrets.vaultwarden_env.sopsFile = ../secrets.yaml;
   services.nginx.virtualHosts.${host} =
     config.satellite.proxy port { proxyWebsockets = true; };
 
+  # {{{ Persistence
   services.vaultwarden = {
     enable = true;
     environmentFile = config.sops.secrets.vaultwarden_env.path;
@@ -17,7 +16,6 @@ in
       DOMAIN = "https://${host}";
       ROCKET_ADDRESS = "127.0.0.1";
       ROCKET_PORT = port;
-      DATA_FOLDER = dataDir;
 
       SIGNUPS_ALLOWED = true;
       SHOW_PASSWORD_HINT = false;
@@ -29,4 +27,13 @@ in
       SMTP_USERNAME = "vaultwarden";
     };
   };
+  # }}}
+  # {{{ Storage 
+  environment.persistence."/persist/state".directories = [{
+    directory = "/var/lib/bitwarden_rs";
+    mode = "u=rwx,g=,o=";
+    user = "vaultwarden";
+    group = "vaultwarden";
+  }];
+  # }}}
 }