WIP: vaultwarden

hosts/caddy/default.nix

@@ -34,6 +34,14 @@ in
         };
       };
 
+      vaultwarden = {
+        proxy = {
+          enable = true;
+          domain = "tegola.pro";
+          host = "vaultwarden.internal";
+        };
+
+      };
     };
 
     monitoring = {

hosts/vaultwarden/default.nix

@@ -0,0 +1,35 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+{
+  my = {
+    utils.commons.enable = true;
+    services.vaultwarden = {
+      enable = true;
+      proxy.domain = "tegola.pro";
+    };
+    virtualisation.proxmox.enable = true;
+  };
+
+  time.timeZone = "Europe/Rome";
+
+  # Extra packages
+  environment.systemPackages = with pkgs; [ ];
+
+  services = {
+    openssh.enable = true;
+  };
+
+  networking = {
+    firewall.allowedTCPPorts = [
+      80
+      443
+    ];
+    nameservers = [ "192.168.1.2" ];
+  };
+
+  system.stateVersion = "24.11";
+}