summaryrefslogtreecommitdiffstats
path: root/makefu/2configs/bitwarden.nix
diff options
context:
space:
mode:
Diffstat (limited to 'makefu/2configs/bitwarden.nix')
-rw-r--r--makefu/2configs/bitwarden.nix50
1 files changed, 0 insertions, 50 deletions
diff --git a/makefu/2configs/bitwarden.nix b/makefu/2configs/bitwarden.nix
deleted file mode 100644
index d57badd1..00000000
--- a/makefu/2configs/bitwarden.nix
+++ /dev/null
@@ -1,50 +0,0 @@
-{ pkgs, ... }:
-let
- port = 8812;
-in {
- services.vaultwarden = {
- enable = true;
- dbBackend = "postgresql";
- config.signups_allowed = false;
- config.rocketPort = port;
- config.domain = "https://bw.euer.krebsco.de";
- #config.databaseUrl = "postgresql://bitwardenuser:${dbPassword}@localhost/bitwarden";
- config.databaseUrl = "postgresql:///bitwarden";
- config.websocket_enabled = true;
- };
-
- systemd.services.vaultwarden.after = [ "postgresql.service" ];
-
- services.postgresql = {
- enable = true;
- ensureDatabases = [ "bitwarden" ];
- ensureUsers = [
- { name = "bitwarden_rs"; ensurePermissions."DATABASE bitwarden" = "ALL PRIVILEGES"; }
- { name = "vaultwarden"; ensurePermissions."DATABASE bitwarden" = "ALL PRIVILEGES"; }
- ];
- };
- services.postgresqlBackup = {
- enable = true;
- databases = [ "bitwarden" ];
- };
- systemd.services.postgresqlBackup-bitwarden.serviceConfig.SupplementaryGroups = [ "download" ];
-
-
- services.nginx.virtualHosts."bw.euer.krebsco.de" ={
- forceSSL = true;
- enableACME = true;
-
- locations."/" = {
- proxyPass = "http://localhost:8812";
- proxyWebsockets = true;
- };
- locations."/notifications/hub" = {
- proxyPass = "http://localhost:3012";
- proxyWebsockets = true;
- };
- locations."/notifications/hub/negotiate" = {
- proxyPass = "http://localhost:8812";
- proxyWebsockets = true;
- };
- };
-}