+vaultwarden

2025-08-01 09:42:41 +02:00
parent 48a734ed82
commit 74a2a10393
3 changed files with 472 additions and 441 deletions
--- a/hosts/AZ-CLD-1/services/vaultwarden.nix
+++ b/hosts/AZ-CLD-1/services/vaultwarden.nix
@@ -0,0 +1,30 @@
+{config, ...}: {
+  services.vaultwarden = {
+    enable = true;
+    backupDir = "/var/backup/vaultwarden";
+    config = {
+      ROCKET_ADDRESS = "127.0.0.1";
+      ROCKET_PORT = 3032;
+    };
+    environmentFile = "${config.age.secrets.vaultwarden-env.path}";
+  };
+
+  # Traefik configuration for headscale
+  services.traefik.dynamicConfigOptions.http = {
+    services.vaultwarden.loadBalancer.servers = [
+      {
+        url = "http://localhost:3032/";
+      }
+    ];
+
+    routers.vaultwarden = {
+      rule = "Host(`pw.az-gruppe.com`)";
+      tls = {
+        certResolver = "ionos";
+      };
+      service = "vaultwarden";
+      entrypoints = "websecure";
+    };
+  };
+}
+