disable reg on pw

This commit is contained in:
glenn 2024-10-23 15:05:38 +02:00
parent fed4ec50b3
commit c4828bf402

View file

@ -1,33 +1,34 @@
{ ... }: {...}: let
let
domain = "pw.sondell.org"; domain = "pw.sondell.org";
port = "8222"; port = "8222";
in in {
{
# #
services.vaultwarden = { services.vaultwarden = {
enable = true; enable = true;
config = {
ROCKET_ADDRESS = "::1";
ROCKET_PORT = 8222;
SIGNUPS_ALLOWED = false;
};
}; };
services.restic.backups = { services.restic.backups = {
"vaultwarden" = { "vaultwarden" = {
passwordFile = "/etc/nixos/.secrets/restic_pw"; passwordFile = "/etc/nixos/.secrets/restic_pw";
repository = "sftp:Glenn@nas:/home/back/vaultwarden/restic"; repository = "sftp:Glenn@nas:/home/back/vaultwarden/restic";
initialize = true; initialize = true;
paths = [ paths = [
"/var/lib/bitwarden_rs" "/var/lib/bitwarden_rs"
]; ];
user = "sondell"; user = "sondell";
timerConfig.OnCalendar = "02:05"; timerConfig.OnCalendar = "02:05";
pruneOpts = [ pruneOpts = [
"--keep-daily 10" "--keep-daily 10"
"--keep-weekly 5" "--keep-weekly 5"
"--keep-monthly 12" "--keep-monthly 12"
"--keep-yearly 75" "--keep-yearly 75"
]; ];
}; };
}; };
services.nginx.virtualHosts.${domain} = { services.nginx.virtualHosts.${domain} = {
forceSSL = true; forceSSL = true;
@ -37,4 +38,3 @@ in
}; };
}; };
} }