Vaultwarden: Difference between revisions
Vaultwarden – A self-hosted Bitwarden-compatible password manager server written in Rust, available as a NixOS module. |
backup folder in the /var/lib/vaultwarden directory would reference itself and is therefore not allowed |
||
| (4 intermediate revisions by 4 users not shown) | |||
| Line 2: | Line 2: | ||
== Example Configuration == | == Example Configuration == | ||
< | <syntaxhighlight lang="nix"> | ||
services.vaultwarden = { | services.vaultwarden = { | ||
enable = true; | enable = true; | ||
backupDir = "/var/ | backupDir = "/var/local/vaultwarden/backup"; | ||
# in order to avoid having ADMIN_TOKEN in the nix store it can be also set with the help of an environment file | |||
# be aware that this file must be created by hand (or via secrets management like sops) | |||
environmentFile = "/var/lib/vaultwarden/vaultwarden.env" | |||
config = { | config = { | ||
# Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template | # Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template | ||
DOMAIN = "https://bitwarden.example.com"; | DOMAIN = "https://bitwarden.example.com"; | ||
SIGNUPS_ALLOWED = false; | SIGNUPS_ALLOWED = false; | ||
ROCKET_ADDRESS = "127.0.0.1"; | ROCKET_ADDRESS = "127.0.0.1"; | ||
ROCKET_PORT = 8222; | ROCKET_PORT = 8222; | ||
| Line 27: | Line 30: | ||
}; | }; | ||
}; | }; | ||
</ | </syntaxhighlight> | ||
== Reverse Proxy Setup (recommended) == | == Reverse Proxy Setup (recommended) == | ||
=== Caddy === | === Caddy === | ||
< | <syntaxhighlight lang="nix">services.caddy.virtualHosts."bitwarden.example.com".extraConfig = '' | ||
services.caddy.virtualHosts."bitwarden.example.com".extraConfig = '' | |||
encode zstd gzip | encode zstd gzip | ||
reverse_proxy :${toString config.services.vaultwarden.config.ROCKET_PORT} | reverse_proxy :${toString config.services.vaultwarden.config.ROCKET_PORT} { | ||
header_up X-Real-IP {remote_host} | |||
} | |||
''; | '';</syntaxhighlight> | ||
</ | |||
=== Nginx === | === Nginx === | ||
<syntaxHighlight lang=nix> | <syntaxHighlight lang=nix> | ||
| Line 55: | Line 56: | ||
[[Category:Server]] | [[Category:Server]] | ||
[[Category:Security]] | [[Category:Security]] | ||
[[Category:Rust]] | |||