WoodSmellParticle/ansible-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(vault): add a HashiCorp Vault role

Browse source
This commit is contained in:
NaeiKinDus 2024-06-26 00:00:00 +00:00
parent 688bdae6a1
commit ddf406fd37
Signed by: WoodSmellParticle
GPG key ID: 8E52ADFF7CA8AE56
17 changed files with 477 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

18
collections/ansible_collections/nullified/infrastructure/roles/vault/templates/config.hcl.j2 Normal file
View file

@ -0,0 +1,18 @@
{%- if not hc_vault_server_config %}
ui = {% if hc_vault_enable_ui %}true{% else %}false{% endif +%}
disable_mlock = false
storage "file" {
path = "{{ hc_vault_root_dir }}/data"
}
# HTTPS listener
listener "tcp" {
address = "0.0.0.0:8200"
tls_cert_file = "{{ hc_vault_root_dir }}/tls/tls.cert"
tls_key_file = "{{ hc_vault_root_dir }}/tls/tls.key"
tls_min_version = "tls13"
}
{%- else %}
{{ hc_vault_server_config }}
{% endif %}