jackos1998
d51f2d62b6
Add a top-level README mapping the boxes and a full docs/ tree: topic pages (architecture, networking, deployment), per-site box pages for colony and home with containers nested under their hosts, remote and mobile boxes, the installer, and the home switch fabric reference (folded in from home-switches.md, with AGENTS.md and code comments retargeted to its new home). Box pages carry marked assignment tables that CI regenerates from nixos.allAssignments. AGENTS.md points at the new docs and keeps its terse agent version of the mechanics, referring to the topic pages for depth.
1.8 KiB
1.8 KiB
vaultwarden
Vaultwarden, a Bitwarden-compatible password
manager, published as pass.nul.ie through middleman.
- Source:
shill/containers/vaultwarden.nix - Host: NixOS container on
shill
Role
- vaultwarden — HTTP on
[::]:8080, WebSocket notifications on3012(both allowed through the firewall). Web vault enabled, signups disabled, Bitwarden push notifications enabled (PUSH_ENABLED).DOMAINishttps://pass.nul.ie. - SMTP via
mail.nul.ie:587(STARTTLS) aspass@nul.ie; credentials and other sensitive settings come from thevaultwarden/config.envage secret. - Backups — a
borgbackupjob pushes/var/lib/vaultwardento rsync.net (zh2855@zh2855.rsync.net:borg/vaultwarden2), repokey-encrypted (passphrase and SSH key from secrets),zstd,10compression, keeping 7 daily / 4 weekly / all monthly archives.
Network assignments
| Name | Assignment | IPv4 | IPv6 | Domain | Notes |
|---|---|---|---|---|---|
| vaultwarden-ctr | internal | 10.100.2.3/24 gw 10.100.2.1 |
2a0e:97c0:4d2:12::3/64 |
ams1.int.nul.ie |
Persistence
/var/lib/vaultwarden is persisted through my.tmproot.persistence — like the other
shill containers the root is ephemeral and real state lives under /persist (bind-mounted
from the host's /persist/containers/vaultwarden).
Notable config files
nixos/boxes/colony/vms/shill/containers/vaultwarden.nix— container definition, service config and the borgbackup job