diff --git a/hosts/desktop/default.nix b/hosts/desktop/default.nix
index e07fdaa..d269f57 100644
--- a/hosts/desktop/default.nix
+++ b/hosts/desktop/default.nix
@@ -9,6 +9,7 @@
     ../../modules/site/mail.nix
     ../../modules/site/music.nix
     ../../modules/site/photo.nix
+	../../modules/site/vault.nix
 
 	../../modules/ssh.nix
   ];
@@ -136,7 +137,7 @@
     repository = "rest:http://10.0.0.4:8000/backup";
 	initialize = true;
 	passwordFile = "/home/lilac/test-password";
-	paths = [ "/var/lib/immich" "/var/lib/music" "/var/lib/gitea" ];
+	paths = [ "/var/lib/immich" "/var/lib/music" "/var/lib/gitea" "/var/lib/vault-backup" ];
 	timerConfig.OnCalendar = "03:30";
 	pruneOpts = [ "--keep-daily 7" "--keep-weekly 4" "--keep-monthly 12" ];
   };
diff --git a/modules/site/vault.nix b/modules/site/vault.nix
new file mode 100644
index 0000000..9481f8e
--- /dev/null
+++ b/modules/site/vault.nix
@@ -0,0 +1,21 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.vaultwarden = {
+    enable = true;
+	backupDir = "/var/lib/vault-backup";
+    config = {
+      DOMAIN = "https://vault.example.com";
+      SIGNUPS_ALLOWED = false;
+      ROCKET_ADDRESS = "127.0.0.1";
+      ROCKET_PORT = 8222;
+    };
+  };
+
+  services.caddy = {
+    enable = true;
+	virtualHosts."vault.grasswren.net".extraConfig = ''
+	  reverse_proxy localhost:8222
+	'';
+  };
+}