cnst/cnix
1
0
Fork 0
Code Issues Pull Requests Activity

homelab tinkering 4

Browse Source
This commit is contained in:
cnst
2025-07-16 07:57:05 +02:00
parent 23e793b784
commit a1ef718b07
2 changed files with 21 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
modules/server/vaultwarden/default.nix
View File

@@ -29,14 +29,9 @@ in {
Group = "root";
};
# services.caddy.virtualHosts."vault.cnst.dev".extraConfig = ''
# encode zstd gzip
# reverse_proxy ${vcfg.ROCKET_ADDRESS}:${toString vcfg.ROCKET_PORT} {
# # header_up X-Real-IP {remote_host}
# # Use this instead, if using Cloudflare's proxy
# header_up X-Real-IP {http.request.header.Cf-Connecting-Ip}
# }
# '';
services.caddy.virtualHosts."vault.cnst.dev".extraConfig = ''
reverse_proxy ${vcfg.ROCKET_ADDRESS}:${toString vcfg.ROCKET_PORT}
'';
services.vaultwarden = {
enable = true;
@@ -46,12 +41,12 @@ in {
config = {
DOMAIN = "https://vault.${domain}";
SIGNUPS_ALLOWED = false;
SIGNUPS_ALLOWED = true;
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222;
EXTENDED_LOGGING = true;
LOG_LEVEL = "warn";
IP_HEADER = "CF-Connecting-IP";
# EXTENDED_LOGGING = true;
# LOG_LEVEL = "warn";
# IP_HEADER = "CF-Connecting-IP";
};
};
};