add vaultwarden

nixos/hosts/olympus/default.nix

@@ -158,6 +158,11 @@
     profile = "vault-1";
     tags = [ "vault" ];
   }
+  {
+    hostname = "vaultwarden";
+    ip = "10.42.42.31";
+    mac = "FA:71:3F:31:34:41";
+  }
   {
     hostname = "nuc";
     ip = "10.42.42.42";

nixos/hosts/olympus/mailserver/configuration.nix

@@ -53,6 +53,10 @@ let vs = config.vault-secrets.secrets; in
         hashedPasswordFile = "${vs.mailserver}/outline@0x76.dev";
         sendOnly = true;
       };
+      "vaultwarden@0x76.dev" = {
+        hashedPasswordFile = "${vs.mailserver}/vaultwarden@0x76.dev";
+        sendOnly = true;
+      };
     };
 
     indexDir = "/var/lib/dovecot/indices";

nixos/hosts/olympus/nginx/configuration.nix

@@ -58,6 +58,7 @@ in
     virtualHosts."grafana.0x76.dev" = proxy "http://victoriametrics.olympus:2342";
     virtualHosts."outline.0x76.dev" = proxy "http://outline.olympus:3000";
     virtualHosts."id.0x76.dev" = proxy "http://keycloak.olympus:80";
+    # virtualHosts."pass.0x76.dev" = proxy "http://vaultwarden.olympus:8222";
 
     # Redshifts
     virtualHosts."andreea.redshifts.xyz" = proxy "http://zmeura.olympus:8008";

nixos/hosts/olympus/vaultwarden/configuration.nix

@@ -0,0 +1,48 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, pkgs, ... }:
+let vs = config.vault-secrets.secrets;
+in {
+  imports = [ ];
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "22.11"; # Did you read the comment?
+
+  # Additional packages
+  environment.systemPackages = with pkgs; [ ];
+
+  networking.firewall.allowedTCPPorts = [ ];
+
+  vault-secrets.secrets.vaultwarden = {
+    user = "vaultwarden";
+    group = "vaultwarden";
+  };
+
+  services.vaultwarden = {
+    enable = true;
+    dbBackend = "sqlite";
+    environmentFile = "${vs.vaultwarden}/environment";
+    config = {
+      DOMAIN = "https://pass.0x76.dev";
+      SIGNUPS_ALLOWED = false;
+      ROCKET_ADDRESS = "127.0.0.1";
+      ROCKET_PORT = 8222;
+
+      SMTP_HOST = "mail.0x76.dev";
+      SMTP_FROM = "vaultwarden@0x76.dev";
+      SMTP_PORT = 465;
+      SMTP_SECURITY = "force_tls";
+      SMTP_DEBUG = false;
+
+      SIGNUPS_VERIFY = true;
+      SIGNUPS_DOMAINS_WHITELIST = "xirion.net,0x76.dev,meowy.tech";
+    };
+  };
+}

nixos/hosts/thalassa/null/home/hyprland.nix

@@ -62,7 +62,7 @@
         bind=SUPER,f,exec,firefox-devedition
         bind=SUPER,d,exec,wofi --show run,drun
 
-        bind=,Print,exec,grim -g "$(slurp)" - | wl-copy -t image/png
+        bind=,Print,exec,grim -g "$(slurp)" -t png - | wl-copy -t image/png
         bind=SUPER,W,killactive,
         bind=SUPERSHIFT,Q,exit,
         bind=SUPER,S,togglefloating,