From c132a6e673fdf4fbb6200d6ea53666831fd7c9fe Mon Sep 17 00:00:00 2001
From: cnst <adam@cnst.dev>
Date: Wed, 16 Jul 2025 15:42:13 +0200
Subject: [PATCH] fail2ban test 8

---
 modules/server/vaultwarden/default.nix |   8 ++++++++
 secrets/vaultwarden-env.age            | Bin 583 -> 595 bytes
 2 files changed, 8 insertions(+)

diff --git a/modules/server/vaultwarden/default.nix b/modules/server/vaultwarden/default.nix
index eb956a93..2a56031a 100644
--- a/modules/server/vaultwarden/default.nix
+++ b/modules/server/vaultwarden/default.nix
@@ -13,6 +13,13 @@ in {
   options = {
     server.vaultwarden.enable = mkEnableOption "Enables vaultwarden";
   };
+
+  age.secrets.vaultwarden-env = {
+    file = "${self}/secrets/vaultwarden-env.age";
+    owner = "vaultwarden";
+    mode = "400";
+  };
+
   config = mkIf cfg.enable {
     systemd.services.backup-vaultwarden.serviceConfig = {
       User = "root";
@@ -39,6 +46,7 @@ in {
     };
     services.vaultwarden = {
       enable = true;
+      environmentFile = config.age.secrets.vaultwarden-env.path;
 
       backupDir = "/var/backup/vaultwarden";
 
diff --git a/secrets/vaultwarden-env.age b/secrets/vaultwarden-env.age
index 99293ee3b83f9d0d6a282bff9e5b3fe3f205bc18..c06d529ba07d991bc9eb7c9298365a3c23470ad7 100644
GIT binary patch
delta 523
zcmX@ka+zg<PJK>fh;~>-o@0_@g;$_{N`8>JzH_9he`1xdd7wo|RCtzaZg^Cdd1O|3
zD3@ViaFvUHc}B5*WmI~4L{_j%Sb>FGwuN6(ZjzHvMwqj?p<9%`WxhvcK9{bYLUD11
zZfc5=si~o*f_G@7ubZPnRf>;yiFc~Akw<w>SY}{Go|{)?aGp<~rH`LmVt%fdfoEc2
zT4shtQfg)(SEZYYnQ>{Jk9m1|K}wL1X{bq3S&CVPQ>MR>X{mOyM`);zd2VK!e}I$k
z#E;_P9$BVtM#0*tK}Jr=C6$2&5r&>=-q`_#CLtjnk%6uzDWxXqp&mYdenGBWm3eud
zrOu^Ed6ub3WhoUw`NknG=59FwN!}KYKIswZMG=+dmEM&}6+!8f;~B;4D-Dc|3!GiU
zGF&ZP9gTwwGE%(FazflfD#}ewEF3d^4ZSV0vW*K;9V1-1qN*}|gUl@*qa0KHob)5o
z3ll?4!m?6xBa^D4LVa?5d=oR=bG1YL65TwxbaizV!i`b`N=$PLj7m(4t8)F4(~5Ib
zBZJba63xA%yerBQUDJ!>d_0QsoWo3$x#s`a$8%2D|IL5@9|pQlpT9YL%09YrV*65V
zmCS@yu8yhO-^r9z-ub&f<YC2Rh4)WAH5X+bP^o;Jx^>#GkiCbs<r_B$pUt@X_NH^z
Q%_#qfo#&MfZaj7e0Ir(8!T<mO

delta 511
zcmcc2a-3y?PQ9UHRH2EhySt&ewn12krMr=#PhO&BiDRINMTnPArCC^*UwL?lb6#GE
zD_4$oaek#mQkX$;n7N5rl4*EFL1kG{Xogd+pP_}Ld1`=fxTjI5rA0w<IhU@TLUD11
zZfc5=si~o*f_G@7ubZPnK%!%Dw!39erdhalx_42EuUkQcWl?~IdvJlDTcV|<L1t=V
zQc8MIj!|YHSFT68r%7dosb6Jcae<jZo=?7uQD9hhNJv;xWx9o7h*_{#l%c<$d2xFA
z#E;_Po}q>YQ6b(Ifd=k@X(rCO#%YNWl}RbSMY+k^fdL`eMMnA_?(Sy6VXo<1nI$DA
zkp}+hS>|a@Cce%gWx2_Denuu49!|!|j+rK2h915l!KUG1QThgx;~B;44MGe89V5!T
zwF6T^{Cy&|Gb|DV{fdGO&0I<iJS;sTqlzM23?nN&44sR)oU+SJLo73blZ%R+EIka1
z{L2fC3Ie^da?67al9Gc`b3IBT+zO2>EQ1ZWbaizV5{=AKvQ3k`iYvpDj9eX!6LZXS
z%$<DPQVfmVgM$5o(tNaoQX>M(v-B&oxel(lH}T#fk436Blk}gyTbrKbWb|?Ry`!yl
z+kPb+6%tdLvuGWMT7Y@I-;F5g`^qWLmExVAhyH#a|D(8)gW;3?qer!AT9Q#_mpTC8
CfUXb#