kris/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tailscale

Browse Source
This commit is contained in:
Kris
2026-03-19 17:39:44 +02:00
parent eebf3f6159
commit 6b886eeea8
9 changed files with 89 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
hosts/server/modules/vaultwarden.nix
View File

@@ -25,16 +25,16 @@
};
};
# Allow vaultwarden to write under /private/vaultwarden and ensure the directory exists.
# Allow vaultwarden to write under /private/vaultwarden and ensure the directories exist.
systemd.services.vaultwarden.serviceConfig = {
ReadWritePaths = [ "/private/vaultwarden" ];
};
systemd.tmpfiles.settings."10-vaultwarden-private"."/private/vaultwarden/data".d = {
user = "vaultwarden";
group = "vaultwarden";
mode = "0750";
};
# Create parent/data directories with proper ownership before startup.
systemd.tmpfiles.rules = [
"d /private/vaultwarden 0750 vaultwarden vaultwarden -"
"d /private/vaultwarden/data 0750 vaultwarden vaultwarden -"
];
# cloudflared!!
# networking.firewall.allowedTCPPorts = [