Vaultwarden: Difference between revisions
|  added environmentfile variable as its needed for admin page and account setup. |  backup folder in the /var/lib/vaultwarden directory would reference itself and is therefore not allowed | ||
| (2 intermediate revisions by 2 users not shown) | |||
| Line 5: | Line 5: | ||
| services.vaultwarden = { | services.vaultwarden = { | ||
|      enable = true; |      enable = true; | ||
|      backupDir = "/var/ |      backupDir = "/var/local/vaultwarden/backup"; | ||
|     # in order to avoid having  ADMIN_TOKEN in the nix store it can be also set with the help of an environment file | |||
|     # be aware that this file must be created by hand (or via secrets management like sops) | |||
|     environmentFile = "/var/lib/vaultwarden/vaultwarden.env" | |||
|      config = { |      config = { | ||
|          # Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template |          # Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template | ||
|          DOMAIN = "https://bitwarden.example.com"; |          DOMAIN = "https://bitwarden.example.com"; | ||
|          SIGNUPS_ALLOWED = false; |          SIGNUPS_ALLOWED = false; | ||
|          ROCKET_ADDRESS = "127.0.0.1"; |          ROCKET_ADDRESS = "127.0.0.1"; | ||
|          ROCKET_PORT = 8222; |          ROCKET_PORT = 8222; | ||
| Line 55: | Line 56: | ||
| [[Category:Server]] | [[Category:Server]] | ||
| [[Category:Security]] | [[Category:Security]] | ||
| [[Category:Rust]] | |||