depot/hosts/VEGAS/services/vault/default.nix

{ config, pkgs, depot, ... }:

{
  services.vault = {
    enable = true;
    storageBackend = "file";
    storagePath = "/srv/storage/private/vault";
    extraConfig = "ui = true";
    package = pkgs.vault-bin;
  };
  services.nginx.virtualHosts."vault.${depot.lib.meta.domain}" = depot.lib.nginx.vhosts.proxy "http://${config.services.vault.address}";
}