{ config, ... }:
{
  services.vaultwarden = {
    enable = true;
    environmentFile = config.secrets.files.vaultwarden_env.file;
    backupDir = "/var/lib/bitwarden_rs/backup";
    config = {
      domain = "https://vault.graven.dev";
      signupsAllowed = false;
      rocketPort = 8812;
      ipHeader = "X-Real-IP";
      websocketEnabled = true;
      websocketAddress = "127.0.0.1";
      websocketPort = "3012";
      #dataDir = "/var/lib/vaultwarden";
      smtpHost = "smtp.soverin.net";
      smtpFrom = "vaultwarden@graven.dev";
      smtpFromName = "Vaultwarden";
      smtpPort = 465;
      smtpSsl = true;
      smtpExplicitTls = true;
      smtpAuthMechanism = "Login";
    };
  };
}