35 lines
709 B
Nix
35 lines
709 B
Nix
{ config, ... }:
|
|
|
|
let
|
|
workDir = "/srv/containers/vaultwarden";
|
|
in
|
|
{
|
|
systemd.tmpfiles.rules = [
|
|
"d ${workDir} 2775 root admin"
|
|
];
|
|
|
|
virtualisation.oci-containers.containers.vaultwarden = {
|
|
autoStart = true;
|
|
image = "vaultwarden/server:latest";
|
|
|
|
ports = [
|
|
"0.0.0.0:10002:80"
|
|
];
|
|
|
|
volumes = [
|
|
"${workDir}:/data"
|
|
];
|
|
|
|
environment = {
|
|
TZ = "Europe/Bucharest";
|
|
DOMAIN = "https://vault.isan.ro";
|
|
WEBSOCKET_ENABLED = "true";
|
|
SIGNUPS_ALLOWED = "true";
|
|
};
|
|
|
|
environmentFiles = [
|
|
config.age.secrets.vaultwarden.path
|
|
];
|
|
};
|
|
}
|