path: root/mkosi.nspawn

[Exec]
Hostname=vaultwarden
ResolvConf=copy-host
Timezone=copy
NoNewPrivileges=yes
PrivateUsers=pick
LinkJournal=try-host

[Files]
PrivateUsersChown=true
BindReadOnly=/etc/vaultwarden/vaultwarden.env
Bind=/var/local/vaultwarden/data:/var/lib/vaultwarden/data

[Network]
VirtualEthernet=no