diff options
Diffstat (limited to 'makefu/2configs/bitwarden.nix')
-rw-r--r-- | makefu/2configs/bitwarden.nix | 50 |
1 files changed, 0 insertions, 50 deletions
diff --git a/makefu/2configs/bitwarden.nix b/makefu/2configs/bitwarden.nix deleted file mode 100644 index d57badd1..00000000 --- a/makefu/2configs/bitwarden.nix +++ /dev/null @@ -1,50 +0,0 @@ -{ pkgs, ... }: -let - port = 8812; -in { - services.vaultwarden = { - enable = true; - dbBackend = "postgresql"; - config.signups_allowed = false; - config.rocketPort = port; - config.domain = "https://bw.euer.krebsco.de"; - #config.databaseUrl = "postgresql://bitwardenuser:${dbPassword}@localhost/bitwarden"; - config.databaseUrl = "postgresql:///bitwarden"; - config.websocket_enabled = true; - }; - - systemd.services.vaultwarden.after = [ "postgresql.service" ]; - - services.postgresql = { - enable = true; - ensureDatabases = [ "bitwarden" ]; - ensureUsers = [ - { name = "bitwarden_rs"; ensurePermissions."DATABASE bitwarden" = "ALL PRIVILEGES"; } - { name = "vaultwarden"; ensurePermissions."DATABASE bitwarden" = "ALL PRIVILEGES"; } - ]; - }; - services.postgresqlBackup = { - enable = true; - databases = [ "bitwarden" ]; - }; - systemd.services.postgresqlBackup-bitwarden.serviceConfig.SupplementaryGroups = [ "download" ]; - - - services.nginx.virtualHosts."bw.euer.krebsco.de" ={ - forceSSL = true; - enableACME = true; - - locations."/" = { - proxyPass = "http://localhost:8812"; - proxyWebsockets = true; - }; - locations."/notifications/hub" = { - proxyPass = "http://localhost:3012"; - proxyWebsockets = true; - }; - locations."/notifications/hub/negotiate" = { - proxyPass = "http://localhost:8812"; - proxyWebsockets = true; - }; - }; -} |