root/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

borg the rest

Browse source
This commit is contained in:
root 2025-11-08 19:19:39 +00:00
parent 767bbd6a5f
commit 59dd33d66c
8 changed files with 147 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

31
services/vaultwarden.nix
View file

@ -6,13 +6,32 @@ in {
"hidden_service/vaultwarden".file = ../secrets/hidden_service/vaultwarden;
};
services.vaultwarden = {
enable = true;
config = {
DOMAIN = "https://vault.distrust.network";
ROCKET_PORT = vaultPort;
services = {
vaultwarden = {
enable = true;
config = {
DOMAIN = "https://vault.distrust.network";
ROCKET_PORT = vaultPort;
};
environmentFile = config.age.secrets."vaultwarden.env".path;
};
borgbackup.jobs."vaultwarden" = {
repo = "ssh://u506783@u506783.your-storagebox.de:23/./vaultwarden";
environment = {
BORG_RSH = "ssh -i ${config.age.secrets."borg_ed25519".path} -o 'StrictHostKeyChecking=no'";
};
paths = [
"/var/lib/vaultwarden"
];
encryption.mode = "none";
compression = "auto,lzma";
startAt = "daily";
prune.keep = {
daily = 7;
weekly = 4;
monthly = -1;
};
};
environmentFile = config.age.secrets."vaultwarden.env".path;
};
distrust.services."vaultwarden" = {