add bitwarden

configs/sputnik/bitwarden.nix

@@ -0,0 +1,13 @@
+{ config, pkgs, lib, ... }: {
+  services.bitwarden_rs = {
+    enable = true;
+    config = {
+      domain = "https://bitwarden.ingolf-wagner.de";
+      #signupsAllowed = true;
+      signupsAllowed = false;
+      rocketPort = 8222;
+      rocketLog = "critical";
+    };
+  };
+
+}

configs/sputnik/configuration.nix

@@ -8,6 +8,7 @@
     ./nginx.nix
     ./tinc.nix
     ./codimd.nix
+    ./bitwarden.nix
     #./syncplay.nix
     #./mail-server.nix
 

configs/sputnik/nginx.nix

@@ -39,6 +39,29 @@ in {
     recommendedProxySettings = true;
     virtualHosts = {
 
+      "bitwarden.ingolf-wagner.de" = {
+        listen = [
+          {
+            addr = "0.0.0.0";
+            port = 4443;
+            ssl = true;
+          }
+          {
+            addr = "0.0.0.0";
+            port = 80;
+            ssl = false;
+          }
+        ];
+        forceSSL = true;
+        enableACME = true;
+
+        locations."/" = {
+          proxyPass = "http://localhost:${
+              toString config.services.bitwarden_rs.config.rocketPort
+            }";
+        };
+      };
+
       "git.ingolf-wagner.de" = {
         listen = [
           {

configs/workhorse/bitwarden.nix

@@ -1,10 +0,0 @@
-{ config, lib, pkgs, ... }: {
-  services.bitwarden_rs = {
-    enable = true;
-    backupDir = "/home/bitwarden_backups";
-    config = { signupsAllowed = true; };
-  };
-
-  backup.dirs = [ config.services.bitwarden_rs.backupDir ];
-
-}

configs/workhorse/graylog.nix

@@ -27,7 +27,7 @@ in {
   services.elasticsearch = {
     enable = true;
     listenAddress = "${config.networking.hostName}.private";
-    extraJavaOptions = ["-Des.http.cname_in_publish_address=true"];
+    extraJavaOptions = [ "-Des.http.cname_in_publish_address=true" ];
   };
 
   services.graylog.enable = true;