Initial commit

server-modules/bitwarden.nix

@@ -0,0 +1,23 @@
+# Bitwarden (or vaultwarden) is a self-hosted password manager.
+{ config, ... }:
+let
+  domain = "vault.jelles.net";
+in
+{
+  services = {
+    vaultwarden = {
+      enable = true;
+      backupDir = "/var/backup/vaultwarden";
+      config = {
+        DOMAIN = "https://" + domain;
+        SIGNUPS_ALLOWED = true;
+        ROCKET_PORT = 8100;
+        ROCKET_LOG = "critical";
+      };
+    };
+
+    caddy.virtualHosts."vault.jelles.net".extraConfig =
+      "reverse_proxy :${toString config.services.vaultwarden.config.ROCKET_PORT}";
+  };
+
+}