feat(arion): migrate vaultwarden

devices/cluster/modules/caddy.nix

@@ -47,7 +47,7 @@ in {
 
         subDomains = {
           # Misc one-liners
-          vault.reverseProxy = "${dockerIP}:8781";
+          vault.reverseProxy = "${servivi}:8781";
           hauk.reverseProxy = "${servivi}:3003";
           headscale.reverseProxy = "${clusterIP}:8085";
           jelly.reverseProxy = "${jellyIP}:80";
@@ -137,7 +137,7 @@ in {
               vaultwarden = {
                 subDirName = "vault";
                 experimental = true;
-                reverseProxy = "${dockerIP}:8780";
+                reverseProxy = "${servivi}:8780";
               };
             };
           };

devices/nas/modules/arion/default.nix

@@ -12,6 +12,7 @@ in {
     ./music/jbots/compose.nix
     ./nextcloud/compose.nix
     ./resume/compose.nix
+    ./vaultwarden/compose.nix
     ./wg-easy/compose.nix
   ];
 

devices/nas/modules/arion/vaultwarden/compose.nix

@@ -0,0 +1,25 @@
+{config, ...}: let
+  inherit (config.arion) rwDataDir;
+
+  rwPath = rwDataDir + "/vaultwarden";
+in {
+  arion.projects."vaultwarden" = {
+    "public-vault" = {
+      image = ./images/vaultwarden.nix;
+      restart = "always";
+
+      ports = ["8781:80"];
+      volumes = ["${rwPath}/public-data:/data"];
+      environment.WEBSOCKET_ENABLED = "true";
+    };
+
+    "private-vault" = {
+      image = ./images/vaultwarden.nix;
+      restart = "always";
+
+      ports = ["8780:80"];
+      volumes = ["${rwPath}/private-data:/data"];
+      environment.WEBSOCKET_ENABLED = "true";
+    };
+  };
+}

devices/nas/modules/arion/vaultwarden/images/vaultwarden.nix

@@ -0,0 +1,8 @@
+pkgs:
+pkgs.dockerTools.pullImage {
+  imageName = "quay.io/vaultwarden/server";
+  imageDigest = "sha256:153defd78a3ede850445d64d6fca283701d0c25978e513c61688cf63bd47a14a";
+  sha256 = "0hgmnj651lyhf6rca0y0x5b0q3f1pv8h1rdkb2wmfxrng7wwjrg8";
+  finalImageName = "quay.io/vaultwarden/server";
+  finalImageTag = "latest";
+}