25 lines
675 B
HCL
25 lines
675 B
HCL
pid_file = "/tmp/vault.pid"
|
|
exit_after_auth = false # Keep running to renew leases
|
|
vault {
|
|
address = "http://10.10.10.20:8200"
|
|
}
|
|
auto_auth {
|
|
method "approle" {
|
|
mount_path = "auth/approle"
|
|
config = {
|
|
role_id_file_path = "/vault/secrets/role_id"
|
|
secret_id_file_path = "/vault/secrets/secret_id"
|
|
remove_secret_id_file_after_read = true
|
|
}
|
|
}
|
|
}
|
|
template {
|
|
source = "/etc/vault/admin-template.hcl"
|
|
destination = "/vault/secrets/admin.env"
|
|
command = "touch /vault/secrets/.admin-ready"
|
|
}
|
|
template {
|
|
source = "/etc/vault/app-template.hcl"
|
|
destination = "/vault/secrets/app.env"
|
|
command = "touch /vault/secrets/.app-ready"
|
|
} |