v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Projects Releases Packages Activity Actions

add auto unseal for vault-1

Browse source
This commit is contained in:
Vivian 2023-04-28 15:55:06 +02:00
parent 9dc8bba4f0
commit c8d0760e0e
5 changed files with 135 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

5
nixos/hosts/olympus/vault-1/configuration.nix
View file

@ -2,7 +2,7 @@
# your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, hosts, ... }: {
_: {
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. It‘s perfectly fine and recommended to leave
@ -16,5 +16,8 @@
enable = true;
openFirewall = true;
node_id = "olympus-2";
autoUnseal = true;
autoUnsealTokenPath = "/var/lib/vault-unseal/keys.json";
};
}