From b8a76b8cb02776a8b0d052d10eb724b6dea781ec Mon Sep 17 00:00:00 2001
From: Jordan Holt <jordan@vimium.com>
Date: Tue, 2 Sep 2025 08:12:51 +0100
Subject: [PATCH] vaultwarden: set SSO_ONLY

---
 hosts/vps1/vaultwarden.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/hosts/vps1/vaultwarden.nix b/hosts/vps1/vaultwarden.nix
index 642418d..09c2802 100644
--- a/hosts/vps1/vaultwarden.nix
+++ b/hosts/vps1/vaultwarden.nix
@@ -29,12 +29,13 @@ in
       rocketPort = 8222;
 
       ssoEnabled = true;
+      ssoOnly = true;
       ssoAuthority = "https://auth.vimium.com/oauth2/openid/vaultwarden";
       ssoClientId = "vaultwarden";
       signupsAllowed = false;
       passwordIterations = 1000000;
       invitationsAllowed = true;
-      invitationOrgName = "Vaultwarden";
+      invitationOrgName = "Vimium";
       domain = "https://${domain}";
     };
     environmentFile = config.age.secrets.vaultwarden-env.path;