From d45d4a5fb6892275907491e2825a7b20fcc67560 Mon Sep 17 00:00:00 2001
From: ibizaman <ibizapeanut@gmail.com>
Date: Wed, 8 Nov 2023 12:28:34 -0800
Subject: [PATCH] do not protect vaultwarden web app

---
 modules/vaultwarden.nix | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/modules/vaultwarden.nix b/modules/vaultwarden.nix
index 913a638..23fb54b 100644
--- a/modules/vaultwarden.nix
+++ b/modules/vaultwarden.nix
@@ -170,11 +170,12 @@ in
             policy = "two_factor";
             subject = ["group:vaultwarden_admin"];
           }
-          {
-            domain = fqdn;
-            policy = "two_factor";
-            subject = ["group:vaultwarden"];
-          }
+          # There's no way to protect the webapp using Authelia this way, see https://github.com/dani-garcia/vaultwarden/discussions/3188
+          # {
+          #   domain = fqdn;
+          #   policy = "two_factor";
+          #   subject = ["group:vaultwarden"];
+          # }
         ];
       }
     ];