root/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

make .onion domains declarative, site updates, add helpers

Browse source
This commit is contained in:
root 2025-11-07 03:09:13 +00:00
parent b3d2a34bc0
commit 450a5ce1d6
25 changed files with 341 additions and 109 deletions
Download patch file Download diff file Expand all files Collapse all files

34
services/vaultwarden.nix
View file

@ -1,26 +1,28 @@
{config, ...}: let
vaultPort = 8222;
onionUrl = "http://gfoqwlo4nmhcywzzyhfanhkf7hz64lkjayngfyrpbd7ohaucu3q4znqd.onion";
in {
age.secrets."vaultwarden.env".file = ../secrets/vaultwarden.env;
age.secrets = {
"vaultwarden.env".file = ../secrets/vaultwarden.env;
"hidden_service/vaultwarden".file = ../secrets/hidden_service/vaultwarden;
};
services = {
vaultwarden = {
enable = true;
config = {
DOMAIN = "https://vault.distrust.network";
ROCKET_PORT = vaultPort;
};
environmentFile = config.age.secrets."vaultwarden.env".path;
services.vaultwarden = {
enable = true;
config = {
DOMAIN = "https://vault.distrust.network";
ROCKET_PORT = vaultPort;
};
environmentFile = config.age.secrets."vaultwarden.env".path;
};
caddy.virtualHosts."https://vault.distrust.network ${onionUrl}".extraConfig = ''
distrust.services."vaultwarden" = {
url = "https://vault.distrust.network";
onion = {
url = "http://gfoqwlo4nmhcywzzyhfanhkf7hz64lkjayngfyrpbd7ohaucu3q4znqd.onion";
secretKey = config.age.secrets."hidden_service/vaultwarden".path;
};
virtualHostConfig = ''
reverse_proxy localhost:${toString vaultPort}
header Onion-Location ${onionUrl}
'';
tor.relay.onionServices."vaultwarden".map = [
80
];
};
}