sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: preferably bind to 0.0.0.0 in vms to remove issues with wireguard

Browse source 
coming up late; also increase default vm memory to 2G
This commit is contained in:
oddlama 2023-08-17 17:10:14 +02:00
parent af066925b4
commit f29318a5ac
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
9 changed files with 30 additions and 52 deletions
Download patch file Download diff file Expand all files Collapse all files

16
hosts/ward/microvms/vaultwarden.nix
View file

@ -2,7 +2,6 @@
config,
lib,
nodes,
utils,
...
}: let
sentinelCfg = nodes.sentinel.config;
@ -24,14 +23,14 @@ in {
services.nginx = {
upstreams.vaultwarden = {
servers."${config.services.vaultwarden.config.rocketAddress}:${toString config.services.vaultwarden.config.rocketPort}" = {};
servers."${config.meta.wireguard.proxy-sentinel.ipv4}:${toString config.services.vaultwarden.config.rocketPort}" = {};
extraConfig = ''
zone vaultwarden 64k;
keepalive 2;
'';
};
upstreams.vaultwarden-websocket = {
servers."${config.services.vaultwarden.config.websocketAddress}:${toString config.services.vaultwarden.config.websocketPort}" = {};
servers."${config.meta.wireguard.proxy-sentinel.ipv4}:${toString config.services.vaultwarden.config.websocketPort}" = {};
extraConfig = ''
zone vaultwarden-websocket 64k;
keepalive 2;
@ -66,9 +65,9 @@ in {
webVaultEnabled = true;
websocketEnabled = true;
websocketAddress = config.meta.wireguard.proxy-sentinel.ipv4;
websocketAddress = "0.0.0.0";
websocketPort = 3012;
rocketAddress = config.meta.wireguard.proxy-sentinel.ipv4;
rocketAddress = "0.0.0.0";
rocketPort = 8012;
signupsAllowed = false;
@ -87,9 +86,8 @@ in {
# Replace uses of old name
systemd.services.backup-vaultwarden.environment.DATA_FOLDER = lib.mkForce "/var/lib/vaultwarden";
systemd.services.vaultwarden = {
after = ["sys-subsystem-net-devices-${utils.escapeSystemdPath "proxy-sentinel"}.device"];
serviceConfig.StateDirectory = lib.mkForce "vaultwarden";
serviceConfig.RestartSec = "600"; # Retry every 10 minutes
systemd.services.vaultwarden.serviceConfig = {
StateDirectory = lib.mkForce "vaultwarden";
RestartSec = "600"; # Retry every 10 minutes
};
}