initial retooling

modules/vaultwarden.nix

@@ -1,5 +1,6 @@
 { config, pkgs, lib, ... }:
 
+<<<<<<< HEAD
 lib.mkIf config.sovran_systemsOS.features.vaultwarden {
 
   # ── Caddy vhost is now handled centrally in caddy.nix ─────
@@ -44,4 +45,25 @@ lib.mkIf config.sovran_systemsOS.features.vaultwarden {
   systemd.services.vaultwarden.serviceConfig.EnvironmentFile = lib.mkAfter [
     "/run/vaultwarden/runtime.env"
   ];
+=======
+let
+	personalization = import ./personalization.nix;
+in
+
+lib.mkIf config.sovran_systemsOS.features.vaultwarden {
+
+	services.vaultwarden = {
+		enable = true;
+		    config = {
+
+        		DOMAIN = "https://${personalization.vaultwarden_url}";
+        		SIGNUPS_ALLOWED = false;
+        		ROCKET_ADDRESS = "127.0.0.1";
+        		ROCKET_PORT = 8777;
+        		ROCKET_LOG = "critical";
+        	};
+		dbBackend = "sqlite";
+		environmentFile = "/var/lib/secrets/vaultwarden/vaultwarden.env";
+	};
+>>>>>>> 5bee5ad99bb7890df011d88e9928b6944c3565f8
 }