infra/ansible/roles/vault_server/templates/vault.hcl.j2

12 lines
322 B
Text
Raw Normal View History

ui = true
listener "tcp" {
address = "0.0.0.0:8200"
2020-10-13 01:59:24 +00:00
tls_cert_file = "/etc/vault.d/certs/vault.pem"
tls_key_file = "/etc/vault.d/certs/vault.key"
}
storage "consul" {
address = "localhost:8500"
path = "vault/"
token = "{{ lookup('hashi_vault', 'secret=kv/data/vault:data')['consul-acl'] }}"
}