add vaultwarden

clan/network.nix

@@ -66,6 +66,7 @@
       ip = "fd28:387a:90:c400::1";
       services = [
         "ca"
+        "vaultwarden"
       ];
     };
 

machines/verbena/configuration.nix

@@ -4,6 +4,7 @@
     self.nixosModules.nix-defaults
     self.nixosModules.nextcloud
     self.nixosModules.gitea
+    self.nixosModules.vaultwarden
 
     self.inputs.srvos.nixosModules.server
 

modules/vaultwarden.nix

@@ -0,0 +1,18 @@
+{
+  config,
+  ...
+}:
+{
+  services.vaultwarden = {
+    enable = true;
+    domain = "vaultwarden.val";
+    configureNginx = true;
+  };
+
+  services.nginx.virtualHosts.${config.services.vaultwarden.domain} = {
+    enableACME = true;
+  };
+
+  security.acme.certs.${config.services.vaultwarden.domain}.server =
+    "https://ca.val/acme/acme/directory";
+}