ansible-hashicorp-vault/templates/config.hcl.j2

27 lines
591 B
Django/Jinja

storage "raft" {
path = "/opt/vault/raft/"
node_id = "{{ inventory_hostname }}"
{% for raft_peer in vault_raft_cluster_members | rejectattr('peer', 'equalto', inventory_hostname) %}
retry_join {
leader_api_addr = "{{ raft_peer.api_addr }}"
}
{% endfor %}
}
listener "tcp" {
address = "{{ vault_address }}:{{vault_port}}"
cluster_address = "{{ vault_cluster_address }}"
tls_disable = 1
}
api_addr = "{{ vault_api_addr }}"
cluster_addr = "{{vault_cluster_addr}}"
ui= true
disable_mlock = true
service_registration "consul" {
address = "127.0.0.1:8500"
}