emelie/nix-deploy
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Wiki Activity

fix vaultwarden backups

Browse source
This commit is contained in:
Emelie 2021-09-23 08:34:01 +02:00
parent fcba9260bc
commit 5c7c56e598
Signed by: emelie
GPG key ID: 49D33365A7E22D12
3 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
config/hosts/wind/configuration.nix
View file

@ -12,6 +12,7 @@
./services/gitea.nix ./services/gitea.nix
./services/restic.nix ./services/restic.nix
./services/sshguard.nix ./services/sshguard.nix
./services/vaultwarden.nix
./data/secrets/secrets.nix ./data/secrets/secrets.nix
]; ];
@ -44,6 +45,7 @@
vim vim
htop htop
iotop iotop
dig
]; ];
nix = { nix = {

2
config/hosts/wind/services/restic.nix
View file

@ -35,7 +35,7 @@
repository = "sftp:restic@despondos.nao.sh:/etheria/backup/wind/vaultwarden"; repository = "sftp:restic@despondos.nao.sh:/etheria/backup/wind/vaultwarden";
initialize = true; initialize = true;
pruneOpts = [ "--keep-daily 7" "--keep-weekly 5" "--keep-monthly 12" "--keep-yearly 75" ]; pruneOpts = [ "--keep-daily 7" "--keep-weekly 5" "--keep-monthly 12" "--keep-yearly 75" ];
timerConfig = { "OnCalendar" = "03:30"; }; timerConfig = { "OnCalendar" = "23:45"; };
extraOptions = [ "sftp.command='ssh restic@despondos.nao.sh -i ${config.secrets.files.ssh_private_key.file} -s sftp'" ]; extraOptions = [ "sftp.command='ssh restic@despondos.nao.sh -i ${config.secrets.files.ssh_private_key.file} -s sftp'" ];
passwordFile = builtins.toString config.secrets.files.restic_pass.file; passwordFile = builtins.toString config.secrets.files.restic_pass.file;
}; };

5
config/hosts/wind/services/vaultwarden.nix
View file

@ -3,17 +3,16 @@
services.vaultwarden = { services.vaultwarden = {
enable = true; enable = true;
environmentFile = config.secrets.files.vaultwarden_env.file; environmentFile = config.secrets.files.vaultwarden_env.file;
backupDir = "/var/lib/vaultwarden/backup"; backupDir = "/var/lib/bitwarden_rs/backup";
config = { config = {
domain = "https://vault.graven.dev"; domain = "https://vault.graven.dev";
signupsAllowed = true; signupsAllowed = true;
rocketPort = 8812; rocketPort = 8812;
rocketLog = warn;
ipHeader = "X-Real-IP"; ipHeader = "X-Real-IP";
websocketEnabled = true; websocketEnabled = true;
websocketAddress = "127.0.0.1"; websocketAddress = "127.0.0.1";
websocketPort = "3012"; websocketPort = "3012";
dataDir = "/var/lib/vaultwarden"; #dataDir = "/var/lib/vaultwarden";
smtpHost = "smtp.soverin.net"; smtpHost = "smtp.soverin.net";
smtpFrom = "vaultwarden@graven.dev"; smtpFrom = "vaultwarden@graven.dev";
smtpFromName = "Vaultwarden"; smtpFromName = "Vaultwarden";