harald/teepot
1
0
Fork 0
mirror of https://github.com/matter-labs/teepot.git synced 2025-07-21 15:13:56 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: dns for vault nodes

Browse source
This commit is contained in:
otani 2024-07-09 16:39:04 +03:00
parent 9826f028b4
commit ace415a43e
No known key found for this signature in database
GPG key ID: 63D6199F26234E09
2 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
packages/container-vault-sgx-azure/default.nix
View file

@ -48,7 +48,7 @@ nixsgxLib.mkSGXContainer {
VAULT_API_ADDR.passthrough = true; VAULT_API_ADDR.passthrough = true;
VAULT_RAFT_NODE_ID.passthrough = true; VAULT_RAFT_NODE_ID.passthrough = true;
DNS_NAMES = "teepot-vault.teepot-vault,vault-0.teepot-vault,vault-1.teepot-vault,vault-2.teepot-vault"; DNS_NAMES = "teepot-vault.teepot-vault,teepot-vault-0.teepot-vault,teepot-vault-1.teepot-vault,teepot-vault-2.teepot-vault";
# otherwise vault will lock a lot of unused EPC memory # otherwise vault will lock a lot of unused EPC memory
VAULT_RAFT_INITIAL_MMAP_SIZE = "0"; VAULT_RAFT_INITIAL_MMAP_SIZE = "0";

8
packages/container-vault-start-config/config.hcl
View file

@ -18,7 +18,7 @@ listener "tcp" {
storage "raft" { storage "raft" {
path = "/opt/vault/data/" path = "/opt/vault/data/"
# override via env var VAULT_RAFT_NODE_ID # override via env var VAULT_RAFT_NODE_ID
node_id = "vault-0.teepot-vault" node_id = "teepot-vault-0.teepot-vault"
# Parameter needed because of slow plugin loading # Parameter needed because of slow plugin loading
# may be relaxed for faster machines # may be relaxed for faster machines
@ -27,19 +27,19 @@ storage "raft" {
#autopilot_update_interval = "60s" #autopilot_update_interval = "60s"
retry_join { retry_join {
leader_api_addr = "https://vault-0.teepot-vault:8210" leader_api_addr = "https://teepot-vault-0.teepot-vault:8210"
leader_ca_cert_file = "/opt/vault/cacert.pem" leader_ca_cert_file = "/opt/vault/cacert.pem"
leader_client_cert_file = "/opt/vault/tls/tls.crt" leader_client_cert_file = "/opt/vault/tls/tls.crt"
leader_client_key_file = "/opt/vault/tls/tls.key" leader_client_key_file = "/opt/vault/tls/tls.key"
} }
retry_join { retry_join {
leader_api_addr = "https://vault-1.teepot-vault:8210" leader_api_addr = "https://teepot-vault-1.teepot-vault:8210"
leader_ca_cert_file = "/opt/vault/cacert.pem" leader_ca_cert_file = "/opt/vault/cacert.pem"
leader_client_cert_file = "/opt/vault/tls/tls.crt" leader_client_cert_file = "/opt/vault/tls/tls.crt"
leader_client_key_file = "/opt/vault/tls/tls.key" leader_client_key_file = "/opt/vault/tls/tls.key"
} }
retry_join { retry_join {
leader_api_addr = "https://vault-2.teepot-vault:8210" leader_api_addr = "https://teepot-vault-2.teepot-vault:8210"
leader_ca_cert_file = "/opt/vault/cacert.pem" leader_ca_cert_file = "/opt/vault/cacert.pem"
leader_client_cert_file = "/opt/vault/tls/tls.crt" leader_client_cert_file = "/opt/vault/tls/tls.crt"
leader_client_key_file = "/opt/vault/tls/tls.key" leader_client_key_file = "/opt/vault/tls/tls.key"