change runtime dir size, add vaultwarden ldap back
This commit is contained in:
@@ -30,9 +30,9 @@ in {
|
||||
../nur.nix
|
||||
];
|
||||
|
||||
# environment.systemPackages = with pkgs; [
|
||||
# nur.repos.mic92.vaultwarden_ldap
|
||||
# ];
|
||||
environment.systemPackages = with pkgs; [
|
||||
nur.repos.mic92.vaultwarden_ldap
|
||||
];
|
||||
|
||||
services.vaultwarden = {
|
||||
enable = true;
|
||||
@@ -53,27 +53,27 @@ in {
|
||||
EnvironmentFile = [config.sops.secrets.bitwarden-smtp-password.path];
|
||||
};
|
||||
|
||||
# systemd.services.vaultwarden_ldap = {
|
||||
# wantedBy = ["multi-user.target"];
|
||||
#
|
||||
# preStart = ''
|
||||
# sed \
|
||||
# -e "s=@LDAP_PASSWORD@=$(<${config.sops.secrets.bitwarden-ldap-password.path})=" \
|
||||
# -e "s=@ADMIN_TOKEN@=$(<${config.sops.secrets.bitwarden-admin-token.path})=" \
|
||||
# ${ldapConfigFile} \
|
||||
# > /run/vaultwarden_ldap/config.toml
|
||||
# '';
|
||||
#
|
||||
# serviceConfig = {
|
||||
# Restart = "on-failure";
|
||||
# RestartSec = "2s";
|
||||
# ExecStart = "${pkgs.nur.repos.mic92.vaultwarden_ldap}/bin/vaultwarden_ldap";
|
||||
# Environment = "CONFIG_PATH=/run/vaultwarden_ldap/config.toml";
|
||||
#
|
||||
# RuntimeDirectory = ["vaultwarden_ldap"];
|
||||
# User = "vaultwarden_ldap";
|
||||
# };
|
||||
# };
|
||||
systemd.services.vaultwarden_ldap = {
|
||||
wantedBy = ["multi-user.target"];
|
||||
|
||||
preStart = ''
|
||||
sed \
|
||||
-e "s=@LDAP_PASSWORD@=$(<${config.sops.secrets.bitwarden-ldap-password.path})=" \
|
||||
-e "s=@ADMIN_TOKEN@=$(<${config.sops.secrets.bitwarden-admin-token.path})=" \
|
||||
${ldapConfigFile} \
|
||||
> /run/vaultwarden_ldap/config.toml
|
||||
'';
|
||||
|
||||
serviceConfig = {
|
||||
Restart = "on-failure";
|
||||
RestartSec = "2s";
|
||||
ExecStart = "${pkgs.nur.repos.mic92.vaultwarden_ldap}/bin/vaultwarden_ldap";
|
||||
Environment = "CONFIG_PATH=/run/vaultwarden_ldap/config.toml";
|
||||
|
||||
RuntimeDirectory = ["vaultwarden_ldap"];
|
||||
User = "vaultwarden_ldap";
|
||||
};
|
||||
};
|
||||
|
||||
services.nginx.virtualHosts."bitwarden.cloonar.com" = {
|
||||
forceSSL = true;
|
||||
|
||||
Reference in New Issue
Block a user