vaultwarden

hosts/kittykat/configuration.nix

@@ -24,6 +24,16 @@
     openFirewall = true;
   };
 
+  services.vaultwarden = {
+    enable = true;
+
+    config = {
+      DOMAIN = "https://vault.kittykat.poggerer.xyz";
+      SIGNUPS_ALLOWED = false;
+      ROCKET_PORT = 8222;
+    };
+  };
+
   nixpkgs.config.allowUnfree = true;
   nix.settings.experimental-features = ["nix-command" "flakes"];
   system.stateVersion = "25.05";

hosts/kittykat/traefik.nix

@@ -49,6 +49,12 @@
               certResolver = "letsencrypt";
             };
           };
+          vaultwarden = {
+            rule = "Host(`vault.kittykat.poggerer.xyz`)";
+            entryPoints = ["websecure"];
+            service = "vaultwarden";
+            tls.certResolver = "letsencrypt";
+          };
         };
 
         services = {
@@ -59,6 +65,11 @@
               ];
             };
           };
+          vaultwarden = {
+            loadBalancer.servers = [
+              {url = "http://127.0.0.1:8222";}
+            ];
+          };
         };
       };
     };