{ config, lib, pkgs, ... }:

{
  services.vaultwarden = {
    enable = true;
	backupDir = "/var/lib/vault-backup";
    config = {
      DOMAIN = "https://vault.example.com";
      SIGNUPS_ALLOWED = false;
      ROCKET_ADDRESS = "127.0.0.1";
      ROCKET_PORT = 8222;
    };
  };

  services.caddy = {
    enable = true;
	virtualHosts."vault.grasswren.net".extraConfig = ''
	  reverse_proxy localhost:8222
	'';
  };
}