diff --git a/hosts/AZ-CLD-1/services/postgres.nix b/hosts/AZ-CLD-1/services/postgres.nix
index 2fd560e..c52df51 100644
--- a/hosts/AZ-CLD-1/services/postgres.nix
+++ b/hosts/AZ-CLD-1/services/postgres.nix
@@ -25,12 +25,17 @@
       CREATE USER outline WITH ENCRYPTED PASSWORD 'outline';
       CREATE DATABASE outline;
       ALTER DATABASE outline OWNER to outline;
+
+      CREATE USER vaultwarden WITH ENCRYPTED PASSWORD 'vaultwarden';
+      CREATE DATABASE vaultwarden;
+      ALTER DATABASE vaultwarden OWNER to vaultwarden;
     '';
     authentication = pkgs.lib.mkOverride 10 ''
       # Local connections (Unix socket)
       local   all         postgres    peer
-      local   outline     outline     scram-sha-256
       local   n8n         n8n         scram-sha-256
+      local   outline     outline     scram-sha-256
+      local   vaultwarden vaultwarden scram-sha-256
 
       # Localhost connections (IPv4 and IPv6)
       host    all          postgres     127.0.0.1/32    scram-sha-256
@@ -55,7 +60,7 @@
   services.postgresqlBackup = {
     enable = true;
     startAt = "03:10:00";
-    databases = ["baserow" "kestra" "n8n" "outline"];
+    databases = ["baserow" "kestra" "n8n" "outline" "vaultwarden"];
   };
   networking.firewall = {
     extraCommands = ''
diff --git a/hosts/AZ-CLD-1/services/vaultwarden.nix b/hosts/AZ-CLD-1/services/vaultwarden.nix
index 2c8337b..d287eea 100644
--- a/hosts/AZ-CLD-1/services/vaultwarden.nix
+++ b/hosts/AZ-CLD-1/services/vaultwarden.nix
@@ -1,7 +1,6 @@
 {config, ...}: {
   services.vaultwarden = {
     enable = true;
-    backupDir = "/var/backup/vaultwarden";
     config = {
       ROCKET_ADDRESS = "127.0.0.1";
       ROCKET_PORT = 3032;