commit af96355a19c1562dd4d8515a244b3ec3ed57f07e
parent fb554cd218cd41bf065a341a3e9fb7b7d5a7df3f
Author: Andreas Gruhler <andreas.gruhler@adfinis.com>
Date: Mon, 27 May 2024 19:41:38 +0200
feat(vault): vault.env file for transit token
Diffstat:
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/vault.sh b/vault.sh
@@ -92,7 +92,6 @@ fi)}
seal "transit" {
address = "$VAULT_TRANSIT_SERVER"
- token = "$VAULT_TRANSIT_TOKEN"
disable_renewal = "false"
key_name = "autounseal"
mount_path = "transit/"
@@ -100,6 +99,8 @@ seal "transit" {
}
EOF
+echo "VAULT_TOKEN=$VAULT_TRANSIT_TOKEN" > /etc/vault.d/vault.env
+
chmod 640 /etc/vault.d/vault.hcl
systemctl enable vault