···

       
1
       
1
       
 
       
{

     

       
2
       
2
       
 
       
  services.golink = {

     

       
3
       
3
       
 
       
    enable = true;

     

       
4
       
4
       
-
       
    tailscaleAuthKeyFile = /run/agenix/golink-authkey;

     

       
5
       
5
       
-
       
  };

     

       
6
       
6
       
-
       
  age.secrets.golink-authkey = {

     

       
7
       
7
       
-
       
    file = ./secrets/golink-authkey.age;

     

       
8
       
8
       
-
       
    path = "/run/agenix/golink-authkey";

     

       
9
       
9
       
-
       
    owner = "golink";

     

       
10
       
10
       
-
       
    group = "golink";

     

       
11
       
4
       
 
       
  };

     

       
12
       
5
       
 
       
}

     

···

       
18
       
18
       
 
       
  services.vaultwarden = {

     

       
19
       
19
       
 
       
    enable = true;

     

       
20
       
20
       
 
       
    dbBackend = "postgresql";

     

       
21
       
21
       
-
       
    webVaultPackage = pkgs.vaultwarden-vault;

     

       
22
       
21
       
 
       
    config = {

     

       
23
       
22
       
 
       
      # Web Server Settings

     

       
24
       
23
       
 
       
      domain = "https://${d.extUrl}";

     

       
25
       
25
       
-
       
      webVaultFolder = "${pkgs.vaultwarden-vault}/share/vaultwarden/vault";

     

       
26
       
24
       
 
       
      rocketAddress = "0.0.0.0";

     

       
27
       
25
       
 
       
      rocketCliColors = false;

     

       
28
       
26
       
 
       
      rocketPort = d.port;

     
···

       
109
       
107
       
 
       
    environmentFile = config.age.secrets.vaultwarden-vars.path;

     

       
110
       
108
       
 
       
  };

     

       
111
       
109
       
 
       
  systemd.services.vaultwarden.environment.PGPASSFILE = config.age.secrets.vaultwarden-pgpass.path;

     

       
112
       
112
       
-
       
  environment.systemPackages = with pkgs; [ vaultwarden-vault ];

     

       
113
       
110
       
 
       
  age.secrets.vaultwarden-vars = vaultwardenSecret // {

     

       
114
       
111
       
 
       
    file = ./secrets/vaultwarden-vars.age;

     

       
115
       
112
       
 
       
  };