{ config, ... }:
let
  metaLib = config.meta.lib;
in
{
  flake.modules.nixos.vaultwarden =
    { lib, ... }:
    lib.mkMerge [
      {
        services.vaultwarden = {
          enable = true;
          backupDir = "/var/backup/vaultwarden";
          config = {
            DOMAIN = "https://vault.jelles.net";
            SIGNUPS_ALLOWED = false;
            ROCKET_PORT = 8100;
            ROCKET_LOG = "critical";
          };
        };
      }

      (metaLib.mkCaddyReverseProxy {
        domain = "vault.jelles.net";
        port = 8100;
      })
    ];
}