titaniumtown/server-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bitwarden: fix backup

Browse Source
This commit is contained in:
Simon Gardling 2025-08-20 10:11:42 -04:00
parent d5c2a01ce1
commit 4b850af15a
Signed by: titaniumtown
GPG Key ID: 9AB28AC10ECE533D
1 changed files with 4 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
services/bitwarden.nix
View File

@ -9,20 +9,17 @@
imports = [
(lib.serviceMountDeps "vaultwarden" [
service_configs.vaultwarden.path
# config.services.vaultwarden.backupDir
config.services.vaultwarden.backupDir
])
(lib.serviceMountDeps "backup-vaultwarden" [
service_configs.vaultwarden.path
# config.services.vaultwarden.backupDir
config.services.vaultwarden.backupDir
])
];
services.vaultwarden = {
enable = true;
# backupDir = "/${service_configs.zpool_ssds}/bak/vaultwarden";
# in order to avoid having ADMIN_TOKEN in the nix store it can be also set with the help of an environment file
# be aware that this file must be created by hand (or via secrets management like sops)
environmentFile = service_configs.vaultwarden.path + "/vaultwarden.env";
backupDir = "/${service_configs.zpool_ssds}/bak/vaultwarden";
config = {
# Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template
DOMAIN = "https://bitwarden.${service_configs.https.domain}";
@ -44,6 +41,6 @@
systemd.tmpfiles.rules = [
"d ${service_configs.vaultwarden.path} 0700 vaultwarden vaultwarden"
# "d ${config.services.vaultwarden.backupDir} 0700 vaultwarden vaultwarden"
"d ${config.services.vaultwarden.backupDir} 0700 vaultwarden vaultwarden"
];
}