nixfiles/hosts/hetzner-arm/profiles/vault.nix
2024-07-21 20:40:28 +01:00

24 lines
434 B
Nix

{pkgs, ...}: {
environment.systemPackages = with pkgs; [
vault
];
services.vault = {
enable = true;
package = pkgs.vault-bin;
address = "127.0.0.1:8200";
storageBackend = "file";
extraConfig = ''
ui = true
'';
};
services.nginx.virtualHosts."vault.owo.monster" = {
forceSSL = true;
enableACME = true;
locations = {
"/".proxyPass = "http://127.0.0.1:8200";
};
};
}