vaultwarden: use SSO with Kanidm

hosts/vps1/secrets/vaultwarden-env.age

@@ -1,7 +1,8 @@
 age-encryption.org/v1
--> piv-p256 a1N2XA Ag/fE6bqn8kUPXEmxU7IcEaW4pRp8Ug5Tvj/49d3kN55
-TNVXUZ38JKTWte+31iuyGDy7P4zJkQzYb+g4QVXu1QM
--> 0S&-grease fn plj(( ShqRnf
-qZ/b2Xf2MA
---- 4HChQHR3R3I0DwDrx7DNmAa+gMhlzY18s3qyGndAitM
-H<1C>h><3E><>p<08>5<EFBFBD>vybdN<64>X<EFBFBD><16>ki]<5D>)<29>!p|<7C>8HL<48><4C>OM{<7B><><0F><><EFBFBD><0B>8<EFBFBD><38>s<EFBFBD><73>LF<4C><46>jM}<7D>:<02>]<5D><EFBFBD>Ǡk<C7A0><6B>%$<24><><EFBFBD>H<EFBFBD><48><EFBFBD>7R<37><52><EFBFBD>Q<EFBFBD>#<23>#<23>f<EFBFBD>*\<5C>X	F4<46>.}<7D>0<EFBFBD><30><EFBFBD><EFBFBD><EFBFBD>{<7B>փpto<>,<2C><>yTs<54>M-<2D><><EFBFBD>X<EFBFBD><16>7<EFBFBD><37>H<EFBFBD><48>usfa[<5B>#<23>K<EFBFBD>}<7D><><0C>:K<>0q<30><71><EFBFBD><EFBFBD>B(o#?eG<1E>5
0<><30>Ҹ<><D2B8>ɧ<EFBFBD>P<EFBFBD>_gC<67>F
+-> piv-p256 a1N2XA A+JTQrgN4xxrQpLhyMtfq82/26DwsudKmxyE8gx9PlJU
+oZjXRvr2mza+28asKcXzSDU0em5edPpazk5dOLXrvZ8
+-> )z\cT7C|-grease v>P/r|O s\(zEXaF Q ,!Y2g+NM
+ZAEVPuF8OEWWNKFP+7IUrpaDydZDAFCRnj1vOdGiBf6BzgbicAAmIF4XgBQqpE5M
+JoCzgjdKB1kLOQB2PWRfJ02L93/zFQXm
+--- vcFS71G0ZZ1bU8dKgMmLMv5sUIi/TYjOu41EuDpJyXw
+:<3A><><15><><EFBFBD><7F>!<21>-<<11><1E>:<3A><><EFBFBD><EFBFBD>rg?<3F>N-i<><69><EFBFBD>?<3F>d<EFBFBD>Z2h<32>3<EFBFBD><0C>]

hosts/vps1/vaultwarden.nix

@@ -28,6 +28,9 @@ in
 
       rocketPort = 8222;
 
+      ssoEnabled = true;
+      ssoAuthority = "https://auth.vimium.com/oauth2/openid/vaultwarden";
+      ssoClientId = "vaultwarden";
       signupsAllowed = false;
       passwordIterations = 1000000;
       invitationsAllowed = true;

secrets/rekeyed/vps1/7e6c3b34b489200f3767ae0f1e6a9f42-vaultwarden-env.age

@@ -1,7 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 lOyIlA goXUvK9rMf7kQ+UZ3aXjHxa5HukNU8pNafu5AbnDaT4
-7DrqHf133Y3A3NV/tjW/jMGrim02LZ79EMM2yLNEKR8
--> }AV-grease VKakg LdQ~#
-aiiVL/zHxATk1wMQ6vFN91tz1hawMBndFzE6Vl/ck6OeL9DS0GswlylbXvuCbg
---- FNJQXjKg1S56UIcgg5+jsRSbtXKVyHKXgtajpaqvqNs
-<EFBFBD><EFBFBD>i<><69>L<EFBFBD><4C><EFBFBD><EFBFBD><1B>|<7C>2\<5C>g5<67>mC<1F>= ,<2C><>;<14><><EFBFBD><EFBFBD><19><><EFBFBD><EFBFBD>F<EFBFBD><46>p<EFBFBD>N<EFBFBD><4E>

secrets/rekeyed/vps1/87759af7d4ddc9e7d805487478d2f53e-vaultwarden-env.age

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 lOyIlA Tyyx5kyLTN9MI+Bc66Rh7RbQ+qZF0S5Y2HCTvUFRqBo
+lzPjwPDXjg8ioc4XAJewTDdzXN5QO3BeGbTVxGW1B0U
+-> *-grease >|vs MPFf.c. nm=m ^
+OHDKbCO9uIoRv9Ar2kbIENz1NLY8iUlzmV07SouSJcxNWyEAqsVzxAkLsIeQKYn5
+XbtjLv88wHhf2w
+--- 7kHTJevOeZdsk2v9qP1V7wL4/Qz8wmFgoQiPMcx56WU
+<EFBFBD>L<EFBFBD><EFBFBD>ȼam<EFBFBD><EFBFBD><EFBFBD><EFBFBD>w<EFBFBD>B]<5D><>
+<EFBFBD><EFBFBD>m<EFBFBD>ھځ<EFBFBD><EFBFBD>Od<EFBFBD><EFBFBD>L%<25>P<EFBFBD><50>I<EFBFBD><49>'<27>X<EFBFBD><58><ko<6B>>OF<4F>j<EFBFBD>8<EFBFBD><38><EFBFBD>8s<>[<5B>(<28><>C<EFBFBD>lTd<><64><EFBFBD>H<14>[9<><39> <20><>$A<>l<EFBFBD>Pf<50>}<7D><>jCo]`<60><><EFBFBD><EFBFBD>nݢ<6E>jw*<16>Y<EFBFBD><i<>MO<4D><4F>D<18><><08>[!T#<23><>ȕX<C895>ق<EFBFBD>K<EFBFBD>X<EFBFBD>-<2D><><EFBFBD>{f<>$%<11><><EFBFBD><EFBFBD>g<>T}<7D><>k<EFBFBD>R1<52>Q?<3F><>?٭Q<D9AD><51>h<EFBFBD>W<EFBFBD> e<><65>||z<><7A>Xe<58>rD3\';<06>j<>F<><46><EFBFBD>hY
+<EFBFBD><16>R<EFBFBD>H1<48><0B>Rꑱ/*w	<09>	3ǷY"<22>{<7B><><EFBFBD>LN<1D>s"<22><1F><>7B<37>