58 current 2025-10-07 22:06:01 25.05.20251001.5b5be50 6.12.49 *

modules/homelab/services/vaultwarden/default.nix

@@ -49,6 +49,7 @@ in
         ROCKET_ADDRESS = "0.0.0.0";
         ROCKET_PORT = cfg.port;
         SIGNUPS_ALLOWED = true;
+        ADMIN_TOKEN = "${toString config.sops.secrets."vaultwarden_admin_token".path}";
         EXPERIMENTAL_CLIENT_FEATURE_FLAGS = "fido2-vault-credentials,autofill-overlay,autofill-v2,inline-menu-positioning-improvements,ssh-key-vault-item";
           # The following flags are available:
           # - "autofill-overlay": Add an overlay menu to form fields for quick access to credentials.
@@ -89,6 +90,13 @@ in
       };
     };
 
+    sops.secrets = {
+      "vaultwarden_admin_token" = {
+        owner = "vaultwarden";
+        group = "vaultwarden";
+      };
+    };
+
      # add to backups
      modules.system.backups.paths = lib.mkIf cfg.backup [ data_dir ];
     };