pid_file = "/tmp/vault.pid"
exit_after_auth = false  # Keep running to renew leases
vault {
  address = "http://10.10.10.20:8200"
}
auto_auth {
  method "approle" {
    mount_path = "auth/approle"
    config = {
      role_id_file_path   = "/vault/secrets/role_id"
      secret_id_file_path = "/vault/secrets/secret_id"
      remove_secret_id_file_after_read = true
    }
  }
}
template {
  source      = "/etc/vault/admin-template.hcl"
  destination = "/vault/secrets/admin.env"
  command = "touch /vault/secrets/.admin-ready"
}
template {
  source      = "/etc/vault/app-template.hcl"
  destination = "/vault/secrets/app.env"
  command = "touch /vault/secrets/.app-ready"
}