nixos-config/modules/system/services/server/vaultwarden/default.nix

{ config, ... }:
{
  imports = [ ./nginx ];

  services.vaultwarden = {
    enable = config.system.server.enable;
    config = {
      DOMAIN = "https://pass.${config.domains.p2}";
      SIGNUPS_ALLOWED = false;
      ROCKET_ADDRESS = "127.0.0.1";
      ROCKET_PORT = 8222;
      ROCKET_LOG = "critical";

      # Smtp email
      SMTP_HOST = "mx.${config.domains.p1}";
      SMTP_FROM = "noreply@${config.domains.p2}";
      SMTP_FROM_NAME = "Vaultwarden";
      SMTP_USERNAME = "noreply@${config.domains.p2}";
      SMTP_PASSWORD = config.secrets.noreplyPassword;
      SMTP_SECURITY = "starttls";
      SMTP_PORT = 587;
      SMTP_TIMEOUT = 15;
    };
  };
}