Compare commits

...

3 commits

Author SHA1 Message Date
Update Bot f1027e1245
Update from update-inputs-2024-10-04-04-20 2024-10-04 04:20:37 +02:00
Update Bot f04564930a
flake.lock: Update
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/568727a884ae7cd9f266bd19aea655def8cafd78' (2024-10-02)
  → 'github:nix-community/disko/574400001b3ffe555c7a21e0ff846230759be2ed' (2024-10-03)
2024-10-04 04:20:34 +02:00
emily eac20c1f2e
vaultwarden: Fix secret owner 2024-10-03 15:47:40 +02:00
2 changed files with 8 additions and 8 deletions

View file

@ -5,14 +5,14 @@
}; };
sops.secrets."services/vaultwarden/basicAuth" = { sops.secrets."services/vaultwarden/basicAuth" = {
sopsFile = ../../secrets/services/vaultwarden.yaml; sopsFile = ../../secrets/services/vaultwarden.yaml;
owner = "vaultwarden"; owner = "nginx";
}; };
services.vaultwarden = { services.vaultwarden = {
enable = true; enable = true;
environmentFile = config.sops.secrets."services/vaultwarden/environmentFile".path; environmentFile = config.sops.secrets."services/vaultwarden/environmentFile".path;
backupDir = "/var/backup/bitwarden_rs"; backupDir = "/var/backup/bitwarden_rs";
config = { config = {
DOMAIN = "https://staging.vault.kyouma.net"; DOMAIN = "https://vault.kyouma.net";
DATABASE_MAX_CONNS = 15; DATABASE_MAX_CONNS = 15;
WEB_VAULT_ENABLED = true; WEB_VAULT_ENABLED = true;
WEBSOCKET_ADDRESS = "::1"; WEBSOCKET_ADDRESS = "::1";
@ -33,10 +33,10 @@
SMTP_SECURITY = "starttls"; SMTP_SECURITY = "starttls";
SMTP_PORT = 587; SMTP_PORT = 587;
ROCKET_ADDRESS = "::1"; ROCKET_ADDRESS = "::1";
ROCKET_PORT = "8222"; ROCKET_PORT = 8222;
}; };
}; };
kyouma.nginx.virtualHosts."staging.vault.kyouma.net" = { kyouma.nginx.virtualHosts."vault.kyouma.net" = {
locations."/" = { locations."/" = {
proxyPass = "http://[::1]:8222"; proxyPass = "http://[::1]:8222";
proxyWebsockets = true; proxyWebsockets = true;
@ -46,5 +46,5 @@
basicAuthFile = config.sops.secrets."services/vaultwarden/basicAuth".path; basicAuthFile = config.sops.secrets."services/vaultwarden/basicAuth".path;
}; };
}; };
security.acme.certs."staging.vault.kyouma.net" = {}; security.acme.certs."vault.kyouma.net" = {};
} }

View file

@ -155,11 +155,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1727872461, "lastModified": 1727977578,
"narHash": "sha256-4Pw3fVhN6xey5+2gUBm9nQJAjBqivffr+a5ZsXYjzJ8=", "narHash": "sha256-DBORKcmQ7ZjA4qE1MsnF1MmZSokOGrw4W9vTCioOv2U=",
"owner": "nix-community", "owner": "nix-community",
"repo": "disko", "repo": "disko",
"rev": "568727a884ae7cd9f266bd19aea655def8cafd78", "rev": "574400001b3ffe555c7a21e0ff846230759be2ed",
"type": "github" "type": "github"
}, },
"original": { "original": {