From 4e6b0d093ab133580fdf547b059021970e96b059 Mon Sep 17 00:00:00 2001
From: Anish Lakhwara <anish+git@lakhwara.com>
Date: Mon, 3 Oct 2022 18:17:07 +1000
Subject: [PATCH] vault-warden reverse proxy

---
 nixos/vault-warden.nix | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/nixos/vault-warden.nix b/nixos/vault-warden.nix
index 88009bb..9225dbb 100644
--- a/nixos/vault-warden.nix
+++ b/nixos/vault-warden.nix
@@ -4,11 +4,24 @@
   services.vaultwarden = {
     enable = true;
     config = {
-      domain = "https://vault.sincerity.network:8443";
+      domain = "https://vault.sincerity.network";
       signupsAllowed = false;
-      rocketPort = 8222;
+      rocketPort = 3011;
       rocketLog = "critical";
     };
     dbBackend = "sqlite";
   };
+
+  services.nginx = {
+    virtualHosts."vault.sincerity.network" = {
+      useACMEHost = "sincerity.network";
+      forceSSL = true;
+      extraConfig = ''
+        client_max_body_size 128M;
+      '';
+      locations."/" = {
+        proxyPass = "http://localhost:3011";
+      };
+    };
+  };
 }