# Example vault-tools config. Copy to ~/.config/vault/vctl.yaml (or config.yaml)
# and edit. Read by both vctl and vctx.

# File-level defaults applied to any context that doesn't set its own value.
defaults:
  method: ldap        # ldap | userpass | okta | radius | token
  user: ben           # login user (defaults to $USER if omitted)
  # namespace: ""     # optional default Vault namespace

contexts:
  # Simplest form: just an address; inherits method/user from defaults.
  sydney:
    address: https://vault.syd1.au.unkin.net

  # Slash-named context nests on disk as ~/.cache/vault/staging/sydney.
  staging/sydney:
    address: https://vault-staging.syd1.au.unkin.net
    namespace: staging
    user: svc-ben     # per-context override

  # Custom auth method + mount path.
  legacy:
    address: https://vault-legacy.example.net
    method: userpass
    path: userpass2   # auth mount path (defaults to the method name)