fail2ban test 3
This commit is contained in:
@@ -14,16 +14,6 @@ in {
|
|||||||
server.vaultwarden.enable = mkEnableOption "Enables vaultwarden";
|
server.vaultwarden.enable = mkEnableOption "Enables vaultwarden";
|
||||||
};
|
};
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
age.secrets.vaultwarden-env = {
|
|
||||||
file = "${self}/secrets/vaultwarden-env.age";
|
|
||||||
owner = "vaultwarden";
|
|
||||||
mode = "400";
|
|
||||||
};
|
|
||||||
|
|
||||||
# allow SMTP
|
|
||||||
# networking.firewall.allowedTCPPorts = [587];
|
|
||||||
|
|
||||||
# this forces the system to create backup folder
|
|
||||||
systemd.services.backup-vaultwarden.serviceConfig = {
|
systemd.services.backup-vaultwarden.serviceConfig = {
|
||||||
User = "root";
|
User = "root";
|
||||||
Group = "root";
|
Group = "root";
|
||||||
@@ -48,7 +38,6 @@ in {
|
|||||||
};
|
};
|
||||||
vaultwarden = {
|
vaultwarden = {
|
||||||
enable = true;
|
enable = true;
|
||||||
# environmentFile = config.age.secrets.vaultwarden-env.path;
|
|
||||||
|
|
||||||
backupDir = "/var/backup/vaultwarden";
|
backupDir = "/var/backup/vaultwarden";
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user