hmm 3

modules/nixos/programs/pkgs/default.nix

@@ -61,6 +61,8 @@ in {
           gparted
           ntfs3g
           cloudflared
+          libargon2
+          openssl
         ]
 
         (mkIf cfg.common.enable [

modules/server/vaultwarden/default.nix

@@ -1,11 +1,9 @@
-# yanked from @fufexan
+# from @fufexan & @notthebee
 {
   config,
-  self,
   lib,
   ...
 }: let
-  inherit (config.networking) domain;
   inherit (lib) mkIf mkEnableOption;
   vcfg = config.services.vaultwarden.config;
   cfg = config.server.vaultwarden;
@@ -46,6 +44,11 @@ in {
       };
     };
 
+    systemd.services.backup-vaultwarden.serviceConfig = {
+      User = "root";
+      Group = "root";
+    };
+
     services = {
       vaultwarden = {
         enable = true;