This repository has no description
add vault.lassul.us
author
lassulus
date
(Nov 13, 2025, 8:14 PM +0700)
commit
0f08c08c
0f08c08c09e5341c24e4e1cb9431a0dad1d3c712
parent
73b41594
73b41594ed35ded8f2e6274461ca0f3d39e669ad
+44
-1
+39
2configs/vaultwarden.nix
+39
2configs/vaultwarden.nix
···
1
+
{
2
+
config,
3
+
options,
4
+
pkgs,
5
+
...
6
+
}:
7
+
{
8
+
clan.core.vars.generators.vaultwarden = {
9
+
files.vaultwarden_admin_token.deploy = false;
10
+
files."vaultwarden.env" = { };
11
+
runtimeInputs = [
12
+
pkgs.pwgen
13
+
pkgs.libargon2
14
+
];
15
+
script = ''
16
+
pwgen 20 1 | tr -d '\n' > $out/vaultwarden_admin_token
17
+
cat $out/vaultwarden_admin_token | argon2 "$(pwgen 20 1 | tr -d '\n')" -e > vaultwarden_token_hashed
18
+
cat > "$out/vaultwarden.env" << EOF
19
+
ADMIN_TOKEN='$(cat vaultwarden_token_hashed)'
20
+
EOF
21
+
'';
22
+
};
23
+
services.vaultwarden = {
24
+
enable = true;
25
+
environmentFile = config.clan.core.vars.generators.vaultwarden.files."vaultwarden.env".path;
26
+
config = options.services.vaultwarden.config.default // {
27
+
SIGNUPS_ALLOWED = false;
28
+
DOMAIN = "https://vault.lassul.us";
29
+
WEBSOCKET_ENABLED = true;
30
+
};
31
+
};
32
+
33
+
services.nginx.virtualHosts."vault.lassul.us" = {
34
+
enableACME = true;
35
+
forceSSL = true;
36
+
locations."/".proxyPass =
37
+
"http://localhost:${toString config.services.vaultwarden.config.ROCKET_PORT}";
38
+
};
39
+
}
+2
-1
2configs/dns/lassul.us.zone
+2
-1
2configs/dns/lassul.us.zone
···
1
-
@ 3600 IN SOA lassul.us. ns1.lassul.us. 2024130000 7200 3600 86400 3600
1
+
@ 3600 IN SOA lassul.us. ns1.lassul.us. 2025111200 7200 3600 86400 3600
2
2
3
3
;;@ 3600 IN NS ns1
4
4
@ 3600 IN NS ns1
···
51
51
cdio IN CNAME neoprism
52
52
c IN CNAME neoprism
53
53
hass IN CNAME neoprism
54
+
vault IN CNAME neoprism
54
55
55
56
;; Mail
56
57
@ IN MX 3 mail