selfprivacy-nixos-config/passmgr/bitwarden.nix

{ pkgs, config, ... }:
let
  cfg = config.services.userdata;
in
{
  services.vaultwarden = {
    enable = cfg.bitwarden.enable;
    dbBackend = "sqlite";
    backupDir = "/var/lib/bitwarden/backup";
    config = {
      domain = "https://password.${cfg.domain}/";
      signupsAllowed = true;
      rocketPort = 8222;
    };
  };
}
Initial commit 2021-11-15 10:02:05 +00:00			`{ pkgs, config, ... }:`
			`let`
			`cfg = config.services.userdata;`
			`in`
			`{`
Move secrets out of Nix Store (#19) Nix store is world-readable, and while nix repl fails to get the secret due to file permissions, we should still set up secrets without getting them in Nix store. In the past tmpfiles.d was used, but its entire contents get to the nix store. Now, all files with secrets are generated in activation scripts, with the help of jq and sed. Also dead Pleroma code was deleted, but CAPTCHA is still broken. Co-authored-by: inexcode <inex.code@selfprivacy.org> Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/19 Co-authored-by: Inex Code <inex.code@selfprivacy.org> Co-committed-by: Inex Code <inex.code@selfprivacy.org> 2022-07-19 12:18:46 +00:00			`services.vaultwarden = {`
Initial commit 2021-11-15 10:02:05 +00:00			`enable = cfg.bitwarden.enable;`
			`dbBackend = "sqlite";`
Fix errors caused by temp files creation 2021-11-17 08:54:36 +00:00			`backupDir = "/var/lib/bitwarden/backup";`
Initial commit 2021-11-15 10:02:05 +00:00			`config = {`
			`domain = "https://password.${cfg.domain}/";`
			`signupsAllowed = true;`
			`rocketPort = 8222;`
			`};`
			`};`
			`}`