durfy/homelab-gitops
1
0
Fork 0
mirror of https://gitlab.durp.info/durfy/homelab/gitops.git synced 2026-05-07 16:00:29 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

update

Browse source
This commit is contained in:
DeveloperDurp 2025-01-23 05:55:55 -06:00
parent 4087eb7aaf
commit 91001c230e
1 changed files with 10 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

18
infra/vault/values.yaml
View file

@ -60,7 +60,7 @@ vault:
enabled: true
standalone:
enabled: false
enabled: true
config: |
disable_mlock = true
@ -68,10 +68,12 @@ vault:
listener "tcp" {
address = "[::]:8200"
cluster_address = "[::]:8201"
tls_cert_file = "/vault/userconfig/vault-server-tls/vault.crt"
tls_key_file = "/vault/userconfig/vault-server-tls/vault.key"
}
seal "transit" {
address = "http://192.168.20.253:8201"
address = "https://root-vault.internal.durp.info"
disable_renewal = "false"
key_name = "autounseal"
mount_path = "transit/"
@ -84,10 +86,10 @@ vault:
# Run Vault in "HA" mode.
ha:
enabled: true
enabled: false
replicas: 3
raft:
enabled: true
enabled: false
setNodeId: true
config: |
@ -101,7 +103,7 @@ vault:
}
seal "transit" {
address = "http://192.168.20.253:8201"
address = "https://192.168.20.253:8201"
disable_renewal = "false"
key_name = "autounseal"
mount_path = "transit/"
@ -111,19 +113,19 @@ vault:
storage "raft" {
path = "/vault/data"
retry_join {
leader_api_addr = "http://vault-0.vault-internal:8200"
leader_api_addr = "https://vault-0.vault-internal:8200"
leader_ca_cert_file = "/vault/userconfig/vault-server-tls/vault.ca"
leader_client_cert_file = "/vault/userconfig/vault-server-tls/vault.crt"
leader_client_key_file = "/vault/userconfig/vault-server-tls/vault.key"
}
retry_join {
leader_api_addr = "http://vault-1.vault-internal:8200"
leader_api_addr = "https://vault-1.vault-internal:8200"
leader_ca_cert_file = "/vault/userconfig/vault-server-tls/vault.ca"
leader_client_cert_file = "/vault/userconfig/vault-server-tls/vault.crt"
leader_client_key_file = "/vault/userconfig/vault-server-tls/vault.key"
}
retry_join {
leader_api_addr = "http://vault-2.vault-internal:8200"
leader_api_addr = "https://vault-2.vault-internal:8200"
leader_ca_cert_file = "/vault/userconfig/vault-server-tls/vault.ca"
leader_client_cert_file = "/vault/userconfig/vault-server-tls/vault.crt"
leader_client_key_file = "/vault/userconfig/vault-server-tls/vault.key"