bitwarden: fix backup

This commit is contained in:
Simon Gardling 2025-08-20 10:11:42 -04:00
parent d5c2a01ce1
commit 4b850af15a
Signed by: titaniumtown
GPG Key ID: 9AB28AC10ECE533D

View File

@ -9,20 +9,17 @@
imports = [ imports = [
(lib.serviceMountDeps "vaultwarden" [ (lib.serviceMountDeps "vaultwarden" [
service_configs.vaultwarden.path service_configs.vaultwarden.path
# config.services.vaultwarden.backupDir config.services.vaultwarden.backupDir
]) ])
(lib.serviceMountDeps "backup-vaultwarden" [ (lib.serviceMountDeps "backup-vaultwarden" [
service_configs.vaultwarden.path service_configs.vaultwarden.path
# config.services.vaultwarden.backupDir config.services.vaultwarden.backupDir
]) ])
]; ];
services.vaultwarden = { services.vaultwarden = {
enable = true; enable = true;
# backupDir = "/${service_configs.zpool_ssds}/bak/vaultwarden"; backupDir = "/${service_configs.zpool_ssds}/bak/vaultwarden";
# in order to avoid having ADMIN_TOKEN in the nix store it can be also set with the help of an environment file
# be aware that this file must be created by hand (or via secrets management like sops)
environmentFile = service_configs.vaultwarden.path + "/vaultwarden.env";
config = { config = {
# Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template # Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template
DOMAIN = "https://bitwarden.${service_configs.https.domain}"; DOMAIN = "https://bitwarden.${service_configs.https.domain}";
@ -44,6 +41,6 @@
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d ${service_configs.vaultwarden.path} 0700 vaultwarden vaultwarden" "d ${service_configs.vaultwarden.path} 0700 vaultwarden vaultwarden"
# "d ${config.services.vaultwarden.backupDir} 0700 vaultwarden vaultwarden" "d ${config.services.vaultwarden.backupDir} 0700 vaultwarden vaultwarden"
]; ];
} }