Deployed 011287b with MkDocs version: 1.6.1
This commit is contained in:
@@ -0,0 +1,11 @@
|
||||
storage "file" { # Указываем что храним секреты в файле, а не БД
|
||||
path = "/mnt/vault/data" # Путь до файла с данным
|
||||
}
|
||||
listener "tcp" { # Указываем какой сервер слушаем
|
||||
address = "0.0.0.0:8200"
|
||||
# tls_cert_file = "/etc/vault/vault-cert.pem"
|
||||
# tls_key_file = "/etc/vault/vault-key.pem"
|
||||
tls_disable = 1 # Отключение https://
|
||||
}
|
||||
ui = true # Включить UI
|
||||
disable_mlock = true
|
||||
@@ -0,0 +1,29 @@
|
||||
[Unit]
|
||||
Description="HashiCorp Vault - A tool for managing secrets"
|
||||
Documentation=https://www.vaultproject.io/docs/
|
||||
Requires=network-online.target
|
||||
After=network-online.target
|
||||
ConditionFileNotEmpty=/etc/vault/config.hcl
|
||||
|
||||
[Service]
|
||||
User=vault
|
||||
Group=vault
|
||||
ProtectSystem=full
|
||||
ProtectHome=read-only
|
||||
PrivateTmp=yes
|
||||
PrivateDevices=yes
|
||||
SecureBits=keep-caps
|
||||
AmbientCapabilities=CAP_IPC_LOCK
|
||||
NoNewPrivileges=yes
|
||||
ExecStart=/usr/local/bin/vault server -config=/etc/vault/config.hcl
|
||||
ExecReload=/bin/kill --signal HUP
|
||||
KillMode=process
|
||||
KillSignal=SIGINT
|
||||
Restart=on-failure
|
||||
RestartSec=5
|
||||
TimeoutStopSec=30
|
||||
StartLimitBurst=3
|
||||
LimitNOFILE=65536
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user