infra/vault/policies/wallabag.hcl

path "kv/data/wallabag" {
  capabilities = ["read"]
}