movefasta/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-03 06:19:10 +03:00
Code Activity

nixos/vaultwarden: drop outdated ownership requirements for environmentFile (#304825)

Browse source 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
This commit is contained in:
networkException 2024-04-24 15:19:33 +02:00 • committed by GitHub
parent db9627d934
commit 3dd970f993
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

16
nixos/modules/services/security/vaultwarden/default.nix
View file

@ -131,21 +131,13 @@ in {
Additional environment file as defined in {manpage}`systemd.exec(5)`. Additional environment file as defined in {manpage}`systemd.exec(5)`.
Secrets like {env}`ADMIN_TOKEN` and {env}`SMTP_PASSWORD` Secrets like {env}`ADMIN_TOKEN` and {env}`SMTP_PASSWORD`
may be passed to the service without adding them to the world-readable Nix store. should be passed to the service without adding them to the world-readable Nix store.
Note that this file needs to be available on the host on which Note that this file needs to be available on the host on which `vaultwarden` is running.
`vaultwarden` is running.
As a concrete example, to make the Admin UI available As a concrete example, to make the Admin UI available (from which new users can be invited initially),
(from which new users can be invited initially),
the secret {env}`ADMIN_TOKEN` needs to be defined as described the secret {env}`ADMIN_TOKEN` needs to be defined as described
[here](https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page). [here](https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page):
Setting `environmentFile` to `/var/lib/vaultwarden.env`
and ensuring permissions with e.g.
`chown vaultwarden:vaultwarden /var/lib/vaultwarden.env`
(the `vaultwarden` user will only exist after activating with
`enable = true;` before this), we can set the contents of the file to have
contents such as:
``` ```
# Admin secret token, see # Admin secret token, see