{config, ...}: {
  services.vaultwarden = {
    enable = true;
    config = with config.constants; {
      # Disable signup
      SIGNUPS_ALLOWED = false;
      # Specify service port
      ROCKET_ADDRESS = localhost;
      ROCKET_PORT = port.vault;
    };
  };
}