nixos/vaultwarden: Allow multiple environment files (#446345)

This commit is contained in:
dotlambda
2025-10-02 08:37:33 +00:00
committed by GitHub
@@ -172,11 +172,11 @@ in
};
environmentFile = lib.mkOption {
type = with lib.types; nullOr path;
default = null;
type = with lib.types; coercedTo path lib.singleton (listOf path);
default = [ ];
example = "/var/lib/vaultwarden.env";
description = ''
Additional environment file as defined in {manpage}`systemd.exec(5)`.
Additional environment file or files as defined in {manpage}`systemd.exec(5)`.
Secrets like {env}`ADMIN_TOKEN` and {env}`SMTP_PASSWORD`
should be passed to the service without adding them to the world-readable Nix store.
@@ -225,7 +225,7 @@ in
serviceConfig = {
User = user;
Group = group;
EnvironmentFile = [ configFile ] ++ lib.optional (cfg.environmentFile != null) cfg.environmentFile;
EnvironmentFile = [ configFile ] ++ cfg.environmentFile;
ExecStart = lib.getExe vaultwarden;
LimitNOFILE = "1048576";
CapabilityBoundingSet = [ "" ];