Ben Vincent
35935db963
- manage openbao audit devices in the configuration file - enable audit and audit_raw logs - enable api access to creating audit devices - restart vault service when changing the configuration file
41 lines
1.2 KiB
YAML
41 lines
1.2 KiB
YAML
---
|
|
profiles::vault::server::members_role: roles::infra::storage::vault
|
|
profiles::vault::server::members_lookup: true
|
|
profiles::vault::server::data_dir: /data/vault
|
|
profiles::vault::server::manage_storage_dir: true
|
|
profiles::vault::server::tls_disable: false
|
|
profiles::vault::server::audit_devices:
|
|
- file:
|
|
audit_raw:
|
|
options:
|
|
path: audit_raw
|
|
type: file
|
|
file_path: /data/vault/audit_raw.log
|
|
log_raw: "true"
|
|
- file:
|
|
audit_file:
|
|
options:
|
|
path: audit_file
|
|
type: file
|
|
file_path: /data/vault/audit.log
|
|
log_raw: "false"
|
|
vault::package_name: openbao
|
|
vault::package_ensure: latest
|
|
|
|
# additional altnames
|
|
profiles::pki::vault::alt_names:
|
|
- vault.main.unkin.net
|
|
- vault.service.consul
|
|
- vault.service.consul
|
|
- vault
|
|
|
|
# manage a simple nginx reverse proxy
|
|
profiles::nginx::simpleproxy::nginx_vhost: 'vault.service.consul'
|
|
profiles::nginx::simpleproxy::nginx_aliases:
|
|
- vault.main.unkin.net
|
|
- vault
|
|
profiles::nginx::simpleproxy::proxy_scheme: 'http'
|
|
profiles::nginx::simpleproxy::proxy_host: '127.0.0.1'
|
|
profiles::nginx::simpleproxy::proxy_port: 8200
|
|
profiles::nginx::simpleproxy::proxy_path: '/'
|