gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(bw): vaultwarden

Browse source
This commit is contained in:
arcnmx 2024-05-26 14:04:19 -07:00
parent 0b0a91d506
commit 0947ca0532
15 changed files with 437 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

1
systems/keycloak/default.nix
View file

@ -12,6 +12,7 @@ _: {
sshd.enable = true;
keycloak.enable = true;
vouch-proxy.enable = true;
vaultwarden.enable = true;
};
};
}

1
systems/keycloak/lxc.json
View file

@ -1,6 +1,7 @@
{
"lxc": {
"lxc.mount.entry": [
"/rpool/shared/vaultwarden mnt/shared/vaultwarden none bind,optional,create=dir",
"/dev/net/tun dev/net/tun none bind,optional,create=file"
],
"lxc.idmap": [

9
systems/keycloak/nixos.nix
View file

@ -12,6 +12,7 @@
nixos.reisen-ct
nixos.ipa
nixos.keycloak
nixos.vaultwarden
nixos.cloudflared
nixos.vouch
];
@ -27,6 +28,8 @@
inherit (keycloak'system.exports.services) keycloak;
vouch'system = access.systemForServiceId "login";
inherit (vouch'system.exports.services) vouch-proxy;
vaultwarden'system = access.systemForServiceId "bw";
inherit (vaultwarden'system.exports.services) vaultwarden;
in {
"${keycloak.id}.${config.networking.domain}" = let
portName =
@ -52,6 +55,12 @@
service = vouch-proxy;
};
};
"${vaultwarden.id}.${config.networking.domain}" = {
service = access.proxyUrlFor {
system = vaultwarden'system;
service = vaultwarden;
};
};
};
};
};