Changed vault warden to use nginx
This commit is contained in:
parent
5832a92555
commit
37bad01424
|
@ -1,7 +1,9 @@
|
||||||
{...}: let
|
{ config, ... }:
|
||||||
|
let
|
||||||
host = "127.0.0.1";
|
host = "127.0.0.1";
|
||||||
port = 8222;
|
port = 8222;
|
||||||
in {
|
in
|
||||||
|
{
|
||||||
services.vaultwarden = {
|
services.vaultwarden = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
||||||
|
@ -22,13 +24,14 @@ in {
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
networking.firewall.allowedTCPPorts = [port];
|
networking.firewall.allowedTCPPorts = [ port ];
|
||||||
networking.firewall.allowedUDPPorts = [port];
|
networking.firewall.allowedUDPPorts = [ port ];
|
||||||
|
|
||||||
services.caddy = {
|
services.nginx.virtualHosts."bitwarden.spoodythe.one" = {
|
||||||
enable = true;
|
enableACME = true;
|
||||||
virtualHosts."bitwarden.spoodythe.one".extraConfig = ''
|
forceSSL = true;
|
||||||
reverse_proxy * ${host}:${toString port}
|
locations."/" = {
|
||||||
'';
|
proxyPass = "http://${host}:${toString port}";
|
||||||
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue