swap vaultwarden

modules/nginx.nix

@@ -1,6 +1,7 @@
 {inputs, pkgs, config, ...}:
 
 {
+  # Secrets
   sops.secrets."CF_DNS_API_TOKEN" = {
     format = "json";
     sopsFile = "${inputs.secrets}/mirror/nginx.json";
@@ -16,6 +17,7 @@
     CF_ZONE_API_TOKEN="${config.sops.placeholder."CF_ZONE_API_TOKEN"}"
   '';
 
+  # Security
   networking.firewall.allowedTCPPorts = [
     80 # http
     443 # https
@@ -31,6 +33,7 @@
     };
   };
 
+  # Definitions
   services.nginx = let 
       services = [
         { name = "authentik"; port = "30000"; }
@@ -58,7 +61,7 @@
         acmeRoot = null;
 
         locations."/" = {
-          proxyPass = "http://10.5.0.2:83";
+          proxyPass = "http://vaultwarden";
           proxyWebsockets = true;
         };
       };