chris/sneeuwvlok
chris/sneeuwvlok
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

harden vaultwarden
All checks were successful
Test action / Print hello world (push) Successful in 19s
Details

Browse source
This commit is contained in:
Chris Kruining 2025-09-03 16:45:32 +02:00
parent 6379b5e2de
commit 44e7a6fa0f
No known key found for this signature in database
GPG key ID: EB894A3560CCCAD2
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/nixos/services/security/vaultwarden/default.nix
View file

@ -76,6 +76,12 @@ in
"vault.kruining.eu".extraConfig = '' "vault.kruining.eu".extraConfig = ''
encode zstd gzip encode zstd gzip
handle_path /admin {
respond 401 {
close
}
}
reverse_proxy http://localhost:${toString config.services.vaultwarden.config.ROCKET_PORT} { reverse_proxy http://localhost:${toString config.services.vaultwarden.config.ROCKET_PORT} {
header_up X-Real-IP {remote_host} header_up X-Real-IP {remote_host}
} }