ansible-hashicorp-vault/templates/config.hcl.j2

storage "raft" {
  path = "/opt/vault/raft/"
  node_id = "{{ inventory_hostname }}"

{% for raft_peer in vault_raft_cluster_members | rejectattr('peer', 'equalto', inventory_hostname) %}
  retry_join {
        leader_api_addr =  "{{ raft_peer.api_addr }}"
}
{% endfor %}
}

listener "tcp" {
  address     = "{{ vault_address }}:{{vault_port}}"
  cluster_address = "{{ vault_cluster_address }}"
  tls_disable = 1
}
api_addr =  "{{ vault_api_addr }}"
cluster_addr =  "{{vault_cluster_addr}}"
ui= true
disable_mlock = true

service_registration "consul" {
  address      = "127.0.0.1:8500"
}