prescientmoon/satellite
1
Fork 0
Code Activity

Create initial vaultwarden setup

Browse source
This commit is contained in:
Matei Adriel 2024-02-10 04:15:17 +01:00
parent a3c58ceff5
commit c51668691a
No known key found for this signature in database
3 changed files with 35 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
hosts/nixos/lapetus/default.nix
View file

@ -8,6 +8,7 @@
./services/whoogle.nix ./services/whoogle.nix
./services/pounce.nix ./services/pounce.nix
./services/intray.nix ./services/intray.nix
./services/vaultwarden.nix
./filesystems ./filesystems
./hardware ./hardware
]; ];

5
hosts/nixos/lapetus/secrets.yaml
View file

@ -1,4 +1,5 @@
tilde_irc_pass: ENC[AES256_GCM,data:+pw/g0pffo1zF++1H/+iFXQDCDw=,iv:zTBvaUCwt78dgv1jF9EmrTuHMnM2S+GUGpQZWY828tA=,tag:umqaQOWqy8aMOxWR0CNGHQ==,type:str] tilde_irc_pass: ENC[AES256_GCM,data:+pw/g0pffo1zF++1H/+iFXQDCDw=,iv:zTBvaUCwt78dgv1jF9EmrTuHMnM2S+GUGpQZWY828tA=,tag:umqaQOWqy8aMOxWR0CNGHQ==,type:str]
vaultwarden_env: ENC[AES256_GCM,data:rs+1lkbvk/vmBEtrJevicROD0Ms/i7KsOuWfnroZ,iv:5zC6nCnMkdgD2eciP6xEdyY7CodOpxQKLfONKXrY3Wk=,tag:ruEziWAkLpA4CnBqynOfqg==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -23,8 +24,8 @@ sops:
RHZ6alYrUU5BZ2xlMkdGR1dWRG5aeGMKJdsdtVZ6Mk9Vo3a+tS+rzAgaF2wpH+8U RHZ6alYrUU5BZ2xlMkdGR1dWRG5aeGMKJdsdtVZ6Mk9Vo3a+tS+rzAgaF2wpH+8U
lWhA+c0Kbe8EJT8hm7Vr8PqBmElz4V9AnXSCTp7D+Cu4pfWsHopLUQ== lWhA+c0Kbe8EJT8hm7Vr8PqBmElz4V9AnXSCTp7D+Cu4pfWsHopLUQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-01-31T20:47:59Z" lastmodified: "2024-02-10T03:03:45Z"
mac: ENC[AES256_GCM,data:srdBFOeQmSc5CEIAjAqVzN4GuQL2el+/Q9cyAavr6Iv/LUUysdf6XkH9U3sZBRBdlcW2RR/Fu95kzSa51QL2RYOmnm6/MM6Kwa13MfTCiLiQBeH6tmCRBO9bKPwE9W24f4RwYhK4m5dIXdhCbN+GsCg6utEEgNKRCRFYSHe6h4Y=,iv:qkz66HLu8EcSDFD6Hkk3mNcP8zxNjAb9keZG/q8d2jM=,tag:M6jybdc4FwUcWbbjbiUONQ==,type:str] mac: ENC[AES256_GCM,data:gPDces9Tg25uFXF1wST0HcmYk99gF9SwT31o4gZsxM1LMSYu1PXJJvHzc5cgbaKmWSlDMVFyg3tFyrYhDtFfVpge2KJhnw7Bvxbh8UdcMCu11AdGhZ0CoAUaXV5Vn236ZiJjaEdGrbv/7wpMdqxVVoC/oU6g6VlHgxxSyvOloeg=,iv:2n1Hkuq06ruDry6CXoWmvaJySDRwfglaAxEsC1DZZJQ=,tag:/aTDGB93ufUpV6yY/zn2Iw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

31
hosts/nixos/lapetus/services/vaultwarden.nix Normal file
View file

@ -0,0 +1,31 @@
{ config, ... }:
let
port = 8404;
host = "warden.moonythm.dev";
in
{
sops.secrets.vaultwarden_env.sopsFile = ../secrets.yaml;
services.vaultwarden = {
enable = true;
environmentFile = config.sops.secrets.vaultwarden_env.path;
config = {
DOMAIN = "https://${host}";
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = port;
DATA_FOLDER = "/persist/state/var/lib/vaultwarden";
SIGNUPS_ALLOWED = true;
SHOW_PASSWORD_HINT = false;
SMTP_SECURITY = "force_tls";
SMTP_PORT = 465;
SMTP_HOST = "smtp.migadu.com";
SMTP_FROM = "vaultwarden@orbit.moonythm.dev";
SMTP_USERNAME = "vaultwarden";
};
};
services.nginx.virtualHosts.${host} =
config.satellite.proxy port { proxyWebsockets = true; };
}