sakura: init vaultwarden

hosts/arashi/services/postgresql.nix

@@ -48,6 +48,10 @@
         name = "atticd";
         ensurePermissions."DATABASE atticd" = "ALL PRIVILEGES";
       }
+      {
+        name = "vaultwarden";
+        ensurePermissions."DATABASE vaultwarden" = "ALL PRIVILEGES";
+      }
     ];
     ensureDatabases = [
       "forgejo"
@@ -56,6 +60,7 @@
       "grafana"
       "authelia"
       "atticd"
+      "vaultwarden"
     ];
   };
 }

hosts/sakura/services/traefik.nix

@@ -104,6 +104,13 @@
             tls.domains = [{main = "*.notohh.dev";}];
             tls.certresolver = "production";
           };
+          vaultwarden = {
+            rule = "Host(`vault.notohh.dev`)";
+            entrypoints = ["websecure"];
+            service = "vaultwarden";
+            tls.domains = [{main = "*.notohh.dev";}];
+            tls.certresolver = "production";
+          };
         };
         services = {
           authelia.loadBalancer.servers = [{url = "http://localhost:9091";}];
@@ -118,6 +125,7 @@
           woodpecker-server.loadBalancer.servers = [{url = "http://localhost:8200";}];
           atticd.loadBalancer.servers = [{url = "http://localhost:8100";}];
           hedgedoc.loadBalancer.servers = [{url = "http://localhost:3300";}];
+          vaultwarden.loadBalancer.servers = [{url = "http://localhost:8222";}];
         };
       };
     };

hosts/sakura/services/vaultwarden.nix

@@ -0,0 +1,15 @@
+{pkgs, ...}: {
+  services.vaultwarden = {
+    enable = true;
+    package = pkgs.vaultwarden-postgresql;
+    dbBackend = "postgresql";
+    config = {
+      SIGNUPS_ALLOWED = true;
+      DATABASE_URL = "postgresql://vaultwarden:vaultwarden@192.168.1.211:5432/vaultwarden";
+      LOG_LEVEL = "Info";
+      ROCKET_ADDRESS = "0.0.0.0";
+      ROCKET_PORT = 8222;
+      ROCKET_LOG = "critical";
+    };
+  };
+}