services/vaultwarden: init

infra/cloudflare.tf

@@ -213,7 +213,7 @@ resource "cloudflare_list" "bulk_redirects" {
     content {
       value {
         redirect {
-          source_url            = "${item.key}.rebmit.moe"
+          source_url            = "${item.key}.rebmit.moe/"
           target_url            = "https://${item.key}.rebmit.workers.moe"
           status_code           = 301
           include_subdomains    = "disabled"

nixos/hosts/suwako-vie1/default.nix

@@ -13,6 +13,7 @@
       services.mail.dovecot
       services.mail.postfix
       services.mail.rspamd
+      services.vaultwarden
     ])
     ++ (mylib.path.scanPaths ./. "default.nix");
 

nixos/modules/networking/ports.nix

@@ -35,6 +35,7 @@ in
       prometheus-node-exporter = 4070;
       prometheus-blackbox-exporter = 4071;
       prometheus-ping-exporter = 4072;
+      vaultwarden = 4080;
 
       # public ports
       enthalpy-wireguard-reimu-aston = 13101;

nixos/profiles/services/vaultwarden/default.nix

@@ -0,0 +1,44 @@
+{ config, ... }:
+{
+  services.vaultwarden = {
+    enable = true;
+    dbBackend = "sqlite";
+    backupDir = "/var/lib/backup/vaultwarden";
+    config = {
+      DOMAIN = "https://vault.rebmit.moe";
+      SIGNUPS_ALLOWED = false;
+      EMERGENCY_ACCESS_ALLOWED = false;
+      SENDS_ALLOWED = false;
+      ORG_CREATION_USERS = "none";
+      ROCKET_ADDRESS = "127.0.0.1";
+      ROCKET_PORT = config.networking.ports.vaultwarden;
+      IP_HEADER = "X-Forwarded-For";
+      ENABLE_WEBSOCKET = false;
+    };
+  };
+
+  services.caddy.virtualHosts."vault.rebmit.moe" = {
+    extraConfig = with config.services.vaultwarden.config; ''
+      reverse_proxy ${ROCKET_ADDRESS}:${toString ROCKET_PORT}
+    '';
+  };
+
+  preservation.preserveAt."/persist".directories = [
+    {
+      directory = "/var/lib/vaultwarden";
+      mode = "-";
+      user = "-";
+      group = "-";
+    }
+    {
+      directory = config.services.vaultwarden.backupDir;
+      mode = "-";
+      user = "-";
+      group = "-";
+    }
+  ];
+
+  services.restic.backups.b2.paths = [
+    "/persist${config.services.vaultwarden.backupDir}"
+  ];
+}

secrets/hosts/opentofu/suwako-vie1.yaml

@@ -1,9 +1,9 @@
-b2_backup_application_key: ENC[AES256_GCM,data:tmJi43ojJ4CjxDTy269hb8PZkWZqIpRTj1kCEqpUbg==,iv:UnuasjJ6TFCTRD49vOUWI4I2MkWIRff6htdf5IwdKnw=,tag:ZxYHK53eX418ipMbBSgj1g==,type:str]
+b2_backup_application_key: ENC[AES256_GCM,data:hFyTQderZss4bRIpi/5gk9mo2m9oPwkkFkfovN4trQ==,iv:uYzD+QMtLZJGskCnx4XiO9Ywvys+F3mr7J+Ea7e+64Y=,tag:hU+bbSKvL2qoLwh0FhVUyA==,type:str]
-b2_backup_application_key_id: ENC[AES256_GCM,data:R9lxfxDWTMRzIyxcjJnH5CwF8yCIhmsW5Q==,iv:QFFyxIaTzrIOvUUsk1CrmEQaqq4yfW+6LkgRzpF3Oyc=,tag:/EkpCRFqzNImX1kdDm4BYg==,type:str]
+b2_backup_application_key_id: ENC[AES256_GCM,data:BYxXEtAY2QvR8hIAQNYJEAu+YUpzIy1MpA==,iv:k8hPJq2v6g02nB8WFTNoHUUidOH3rI/6AtXYcqhMkCw=,tag:gdLbkGS3KkqYaiYM2EOJEQ==,type:str]
-enthalpy_node_private_key_pem: ENC[AES256_GCM,data:I/QOTH2Q2i3e2Ba5kVPSIYnuonjochEW2KNc7RDe05VBsiTY9i3Cj0bCy26OIEiqCr5kQ+1T0K/fu83h6M2S5BH10Hg9YlXJ4V/OYQnO0FkNkYm5pNrVCsBIpeoAaAua7yeRWktZvyR5nxm0p0SBZQWWExM/7DE=,iv:QTSvLQyVPW/AJ2xdGQdRwYYqWzIkMsdbFMopUO0YDxA=,tag:/gcN8JhkfLFIDLlxAURRPA==,type:str]
+enthalpy_node_private_key_pem: ENC[AES256_GCM,data:rZsjwluYWmnWIhAjoemMMFMqRna3GEexf1C7Tj91soKcwPwgOvuunm3OZPTyuz1BLM8lH9IJ0A+Y/78rTZzuNqIcGtCAvTEHvw0ONvvHYfglWf9qkxXKvSvl4mS4W4p6f0UpHA4dVSbNbENERXTK14aRnZjuPa8=,iv:6/tHS/deXclBCeFNHb3CDJf0ZyFnFDav5UaMJfEEo8s=,tag:it275QCovIbq7YJ5BYD6fw==,type:str]
-restic_password: ENC[AES256_GCM,data:NyXPgaGTBktPTN+HBwwFhlapPPgvfEY2J+tsXNCJEAk=,iv:uSrBzUPA/wJnrO3FrgYMQlyYItKWW5IcffS0P6TYA0Q=,tag:2+P1u7LyCPG7javepImtQA==,type:str]
+restic_password: ENC[AES256_GCM,data:kLKp0KgAsaUMbd5ECoR+4aKxVdYyR44DqqjQT8MfGqw=,iv:f/JP4u9hiOvB9FiDZu0M7e4Rtxcjk+cf7pC+nnG3t/E=,tag:pIGN+x+nLFvS92tRB4udWg==,type:str]
-ssh_host_ed25519_key: ENC[AES256_GCM,data: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,iv:pZYrIDYPnRpXIp8FW1w3rDB09ZC0GLaQk7Wy1FsPOFE=,tag:W3OiNTf1zLjFMfM3nO9M1A==,type:str]
+ssh_host_ed25519_key: ENC[AES256_GCM,data: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,iv:cZqdWFXNaMV7iAXgga50gDPxcqWKI++72+/lvBK/ShA=,tag:ifMaeZrA695z7MOjd5TIRA==,type:str]
-ssh_host_rsa_key: ENC[AES256_GCM,data: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,iv:RuIO8QgGACJLzKbfX5YcqtQi3savKdCcSiRZhscKjrA=,tag:Ezzw8l2nxKTKhEmKqQSpAA==,type:str]
+ssh_host_rsa_key: ENC[AES256_GCM,data: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,iv:2s+oPj5Lj2fQ2mVY6kYS/jWNRkivsd7PsjKX9oGB8oM=,tag:O7Z7xGReK3GxW8+3mNjRGQ==,type:str]
 sops:
   kms: []
   gcp_kms: []
@@ -13,23 +13,23 @@ sops:
     - recipient: age1sfnct03u4cvfj98x4yjrcrrnu5gg8qgxrwk4uqq8w4e6wveeaedq97rn44
       enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Y01hY3dYcjFkaXY4K0Fh
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0d3RTV3dWcnB6RDhjclhW
-        VXBnY1BjNWFKS2YvNngvY2JmUmpXRTltNkNrCnpsQ3ZuNGptOU56aEJTd01MMEJu
+        azlsWHFybmV3SVNPemd3OTYwTFpsK1gyclFrCldvS1JBeGk2eGczM3JvVExrdXUw
-        RXpyOFRtRmRSMkRQNUlIK0tnSTZUNGsKLS0tIHhzVWhnS25OVllncEV2TmhCbU5D
+        bHZEK1ArN0VRbmNiNmhTa3N5MGFHbXMKLS0tIGJHYVZzL1NXbXkrWXFGWVYyVFUw
-        MzhHRU16c1JXcVBWVncyUGtBd1A3ekkKpyfyD/rqAN0h4tyb6tdPMtm06CmN9l1X
+        Mm9tSWhnKzY1ZWI2blc1UXNiVVgrMDAK1a+7v9Xq7KgoeRo1qgDyUW8MaL6jFSdo
-        5c1rKA4b669NHGrqGJPryBXPc7NNjbsGGFaiztrkq+HB21ED3NjbyA==
+        dskGi/GsmZfNBISGEhzQinxOxC0epeC/l68/G2zWYUSRRn45BrZLyg==
         -----END AGE ENCRYPTED FILE-----
     - recipient: age1p9xzkzc3zxasgxtd75html0pvrtd6fzvmhz6n388vtjg36d3zffsvma0j0
       enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQSEpKNkRxZkF2enVTNFNE
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKdmh0UkxCWFZNczNJVDB0
-        V0U3WjhsVWV1T2c1ZURjMUk0dVhVNEd4ckRFCkZaSmFuYlZYbjZwUkMrUU5aZzQr
+        UkM1VlRLZnZoSnVCNFBVakc3UlhNUFFpOEdNCjBkQTUzNVBiaTAwUFJ5S1BTYWQv
-        OWMrWHNMNXpmQzBNT1hMWHhrQWtLVk0KLS0tIGJYRDRBVjNPR1diWGVDUVlhUUFZ
+        NFlLUXJWUVAreTVEZ3BCZElSZitBc0kKLS0tIGNacURnTSsyYVpqV0NBYXN2bVlO
-        aC9BMjAyd2Z4Q0NXeGs3S2tyV3RCd2sKmeuc1fioavUE9WvaJa+wXc/upLXIn2dd
+        MFdHRjFiakNUQjhGZ1JKMllsbnpTczgKSZJVxne762KacoyZQoe8JNQZjMDWmADD
-        Bfu8zTwhM+GyEm4WmhRY2b0MytyN7lru1qCzL+kGPl/5Ez1xCvUgMQ==
+        n8PwYwAnN5DDoQNi4mbQLobI3mAPCM1b4QR6bKeby7ggSnkJ8BSURQ==
         -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2025-01-01T01:20:23Z"
+  lastmodified: "2025-01-01T12:02:35Z"
-  mac: ENC[AES256_GCM,data:Ei7p/bw/gGRZvLbxhbkfooT+CTEFfwDS4rbycCvvvKOgHm2VINCRGJOw2mcOxAkNs/96xNzNQAfsjtRqJYeyDNWYJjRaTi8P2DRrfA354tS5WjaShKRq8enrvGCAlLT2NzyfPfLCzq/a3/UMdJMVaDbJR5wgy/LCYdJHMV+ovvw=,iv:0zt//D1yC0ILJYU6RUrCpdjvy7cTWYCZT89DCiQE4IQ=,tag:+9x6TA2GBVcI/CZWpywNIw==,type:str]
+  mac: ENC[AES256_GCM,data:liJvma0OzsLNQ1XaA+UQj2x9K/wUiQQrHXfnhdqbqxquR0L4V7+yxLuEYQzQVwQ0sTG3oPmlvFhAhWHplGDorAt+w8YYi/HK1C7AWecxF0RFN7PLzxnFS4rYMZTth3DNDYNd6sLzomKpRGFXb+bmuMUN/X2rZ2jhl8Rim8fVtz8=,iv:u8M14tlZDr4bNzI83+SCZ7rgp2R8CxHD6EZ/B2r0v+0=,tag:vtSVPecef1XxoONkdX97Qg==,type:str]
   pgp: []
   unencrypted_suffix: _unencrypted
   version: 3.9.2

zones/rebmit.moe.nix

@@ -49,5 +49,6 @@ dns.lib.toString "rebmit.moe" {
     miniflux.CNAME = [ "suwako-vie0.rebmit.link." ];
     ntfy.CNAME = [ "fallback.workers.moe." ];
     prometheus.CNAME = [ "fallback.workers.moe." ];
+    vault.CNAME = [ "suwako-vie1.rebmit.link." ];
   };
 }