container: vaultwarden smtp

modules/agenix.nix

@@ -11,8 +11,8 @@
 
     # Secrets
     age.secrets = {
-        mindwtr = {
+        vaultwarden = {
-            file = ../secrets/mindwtr.age;
+            file = ../secrets/vaultwarden.age;
             owner = "root";
             group = "root";
             mode = "0400";

modules/containers/vaultwarden.nix

@@ -22,12 +22,18 @@ in
         
         environment = {
             TZ = "Europe/Bucharest";
-            DOMAIN = "vault.isan.ro";
+            DOMAIN = "https://vault.isan.ro";
             WEBSOCKET_ENABLED = "true";
-            SIGNUPS_ALLOWED = "false";
+            SIGNUPS_ALLOWED = "true";
-
-            UID = "1000";
-            GID = "10000";
         };
+
+        environmentFiles = [
+            config.age.secrets.vaultwarden.path # SMTP Secrets
+        ];
+
+        # For directory permissions
+        extraOptions = [
+            "--user=1000:10000"
+        ];
     };
 }

secrets/mindwtr.age

@@ -1,13 +0,0 @@
------BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFA5bEdnQSB1ajky
-R0RZREFKM3ZUaS9KdVN4cGJCbXhlQzBYbndyQ3NHNzlQTnBCM2dnCmpSS25CdzhR
-akxBa1hXbFAzSjNDY012cERlMHNSTlM0QlZROE9UZXFxdGMKLT4gc3NoLWVkMjU1
-MTkgS0tuNDVBIExqaWZHbDQ0Z25xYm9VK2VJYzVZZ0lQZUFqbzRQUDhlY1lnZ1Az
-VzY1aEEKR2dHZmdHeWpJR3hWbEpPckg4QzRiVDN4NG9mRURKYmxJNk54bmZlNzZ1
-MAotPiBxTiYtZ3JlYXNlIDNZISBBMnBmWFwhLSBGP2onfWsKTU5qekFBdkxnbkgw
-NzhjK2lvcnRvYUMwcGNUMStXL04yeDZyWGVnM1NCYVJhdE0KLS0tIExNbGthT1VR
-VDMxd3l1U0lIbGczaHlJQ0dxdFdBZDAzU1hPRFhxZk5jYUkK/PpI923pRhBaNIYC
-IZQJOp3ocz23sKh7Q5y+dFeVg5SVRLnPJbCvvbNdjgFIN+M/f4b/ch3T6gJVfVdM
-MlVhvJtvGRJi3HV7lV6JOa4K4XefKh4U9K6o2/Z3YEp1kAosfhGANDufyVxgnpNW
-qg==
------END AGE ENCRYPTED FILE-----

secrets/secrets.nix

@@ -6,5 +6,5 @@ let
   systems = [ isengard ];
 in
 {
-  "mindwtr.age".publicKeys = [ victor isengard ];
+  "vaultwarden.age".publicKeys = [ victor isengard ];
 }

secrets/vaultwarden.age

@@ -0,0 +1,13 @@
+-----BEGIN AGE ENCRYPTED FILE-----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==
+-----END AGE ENCRYPTED FILE-----