diff --git a/modules/agenix.nix b/modules/agenix.nix index bf44d51..9a60675 100644 --- a/modules/agenix.nix +++ b/modules/agenix.nix @@ -11,8 +11,8 @@ # Secrets age.secrets = { - mindwtr = { - file = ../secrets/mindwtr.age; + vaultwarden = { + file = ../secrets/vaultwarden.age; owner = "root"; group = "root"; mode = "0400"; diff --git a/modules/containers/vaultwarden.nix b/modules/containers/vaultwarden.nix index 20aa408..e953aeb 100644 --- a/modules/containers/vaultwarden.nix +++ b/modules/containers/vaultwarden.nix @@ -22,12 +22,18 @@ in environment = { TZ = "Europe/Bucharest"; - DOMAIN = "vault.isan.ro"; + DOMAIN = "https://vault.isan.ro"; WEBSOCKET_ENABLED = "true"; - SIGNUPS_ALLOWED = "false"; - - UID = "1000"; - GID = "10000"; + SIGNUPS_ALLOWED = "true"; }; + + environmentFiles = [ + config.age.secrets.vaultwarden.path # SMTP Secrets + ]; + + # For directory permissions + extraOptions = [ + "--user=1000:10000" + ]; }; } diff --git a/secrets/mindwtr.age b/secrets/mindwtr.age deleted file mode 100644 index 9b28848..0000000 --- a/secrets/mindwtr.age +++ /dev/null @@ -1,13 +0,0 @@ ------BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFA5bEdnQSB1ajky -R0RZREFKM3ZUaS9KdVN4cGJCbXhlQzBYbndyQ3NHNzlQTnBCM2dnCmpSS25CdzhR -akxBa1hXbFAzSjNDY012cERlMHNSTlM0QlZROE9UZXFxdGMKLT4gc3NoLWVkMjU1 -MTkgS0tuNDVBIExqaWZHbDQ0Z25xYm9VK2VJYzVZZ0lQZUFqbzRQUDhlY1lnZ1Az -VzY1aEEKR2dHZmdHeWpJR3hWbEpPckg4QzRiVDN4NG9mRURKYmxJNk54bmZlNzZ1 -MAotPiBxTiYtZ3JlYXNlIDNZISBBMnBmWFwhLSBGP2onfWsKTU5qekFBdkxnbkgw -NzhjK2lvcnRvYUMwcGNUMStXL04yeDZyWGVnM1NCYVJhdE0KLS0tIExNbGthT1VR -VDMxd3l1U0lIbGczaHlJQ0dxdFdBZDAzU1hPRFhxZk5jYUkK/PpI923pRhBaNIYC -IZQJOp3ocz23sKh7Q5y+dFeVg5SVRLnPJbCvvbNdjgFIN+M/f4b/ch3T6gJVfVdM -MlVhvJtvGRJi3HV7lV6JOa4K4XefKh4U9K6o2/Z3YEp1kAosfhGANDufyVxgnpNW -qg== ------END AGE ENCRYPTED FILE----- diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 8a49b89..3a733bb 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -6,5 +6,5 @@ let systems = [ isengard ]; in { - "mindwtr.age".publicKeys = [ victor isengard ]; + "vaultwarden.age".publicKeys = [ victor isengard ]; } diff --git a/secrets/vaultwarden.age b/secrets/vaultwarden.age new file mode 100644 index 0000000..e8c92bf --- /dev/null +++ b/secrets/vaultwarden.age @@ -0,0 +1,13 @@ +-----BEGIN AGE ENCRYPTED FILE----- +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFA5bEdnQSA3alA3 +RHVHNS9jVmw4dGlTT0pFVUVraWxsZzVFZHMyL1hJT0E5b0x0R2tvCldDVDJ1SXQ4 +eGZqS3ZXSDR2NHJSbUhkUExyZGdUMi90RzdtV044SVhnZDAKLT4gc3NoLWVkMjU1 +MTkgS0tuNDVBIEU1WERxZGZmVlh5dzJSeVA4dEZTREJkdjlOOEg3QkZ4dnF4TVdI +S1RKMmsKUXkwU01vNlozY3dRSnhqU0UrQ3FQbjRKNmhFNWJKbWNsZG5sblRpTmlr +MAotPiBkUC1ncmVhc2UgOykgKHIuCmd4cFNFNTNKCi0tLSBMSlRqc3dHZy9iL1Ra +ZmtMeUNONkpQRGR1ZG1yS3lZeGJzNE9xVmp6NFlZChB9xndNDCY4LSUuCrsp0Wg+ +AY0pfc+Y7WhzgVWtSiWTpv64IchDs9ZlImlHr7+OXk+0FdFgmyWZqlKUhlKsJ5H0 +4Fkjpk/OB2JS4WW1DeXyfqO2iee1pvNrKCPd/1gChXUbpjO8l/Zx+2FcWZFFLD6h +Plii0FDzkRYM9gcJSHxl1s1GGo9ALdqN+mXtJdKzgLoskHnbM9n8U+kqzQXMtbvK +HSsv/BImyfLJXgXAi3xzpydANgYTxQ1lv90MEk7NGBF/ObWHBv51aO7E7/PCmg== +-----END AGE ENCRYPTED FILE-----