infra/ansible/roles/vault_server/templates/vault.hcl.j2

13 lines
333 B
Django/Jinja

ui = true
listener "tcp" {
address = "0.0.0.0:8200"
tls_disable = true
# tls_cert_file = "/path/to/fullchain.pem"
# tls_key_file = "/path/to/privkey.pem"
}
storage "consul" {
address = "localhost:8500"
path = "vault/"
token = "{{ lookup('hashi_vault', 'secret=kv/data/vault:data')['consul-acl'] }}"
}