noah/dotfiles
1
0
Fork 0
mirror of https://github.com/nmasur/dotfiles synced 2025-07-05 15:00:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

working vaultwarden

Browse Source 
haven't tested websockets
This commit is contained in:
Noah Masur
2022-10-16 18:10:11 +00:00
parent 7bca2775d1
commit 6f67e31723
3 changed files with 45 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
modules/services/vaultwarden.nix
View File

@ -1,4 +1,4 @@
{ config, pkgs, lib, ... }: {
{ config, lib, ... }: {
options = {
@ -13,12 +13,40 @@
services.vaultwarden = {
enable = true;
config = {
DOMAIN = config.vaultwardenServer;
DOMAIN = "https://${config.vaultwardenServer}";
SIGNUPS_ALLOWED = false;
SIGNUPS_VERIFY = true;
INVITATIONS_ALLOWED = true;
WEB_VAULT_ENABLED = true;
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222;
WEBSOCKET_ENABLED = true;
WEBSOCKET_ADDRESS = "0.0.0.0";
WEBSOCKET_PORT = 3012;
LOGIN_RATELIMIT_SECONDS = 60;
LOGIN_RATELIMIT_MAX_BURST = 10;
ADMIN_RATELIMIT_SECONDS = 300;
ADMIN_RATELIMIT_MAX_BURST = 3;
};
environmentFile = null;
environmentFile = config.secrets.vaultwarden.dest;
dbBackend = "sqlite";
};
};
secrets.vaultwarden = {
source = ../../private/vaultwarden.age;
dest = "${config.secretsDirectory}/vaultwarden";
owner = "vaultwarden";
group = "vaultwarden";
};
networking.firewall.allowedTCPPorts = [ 3012 ];
caddyRoutes = [{
match = [{ host = [ config.vaultwardenServer ]; }];
handle = [{
handler = "reverse_proxy";
upstreams = [{ dial = "localhost:8222"; }];
}];
}];
}