sneeuwvlok/_modules/system/services/security.nix
2025-07-28 14:34:09 +02:00

29 lines
594 B
Nix

{ config, lib, pkgs, ... }:
let
inherit (lib.options) mkEnableOption;
inherit (lib.modules) mkIf;
cfg = config.modules.services.security;
in
{
options.modules.services.security = {
enable = mkEnableOption "Security service(s): Vaultwarden";
};
config = mkIf cfg.enable {
environment.systemPackages = with pkgs; [
vaultwarden
vaultwarden-postgresql
];
services.vaultwarden = {
enable = true;
dbBackend = "postgresql";
config = {
SIGNUPS_ALLOWED = false;
DOMAIN = "https://passwords.kruining.eu";
};
};
};
}