teepot/packages/container-vault-start-config/config.hcl
Harald Hoyer c92cb4e0b1
fix: increase performance_multiplier
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-08-07 16:43:30 +02:00

56 lines
1.8 KiB
HCL

# Parameter needed because of slow plugin loading
# may be relaxed for faster machines
#http_read_header_timeout = 0
#http_read_timeout = 300
disable_mlock = true
ui = false
listener "tcp" {
address = "0.0.0.0:8210"
cluster_address = "0.0.0.0:8211"
tls_disable = false
tls_cert_file = "/opt/vault/tls/tls.crt"
tls_key_file = "/opt/vault/tls/tls.key"
tls_client_ca_file = "/opt/vault/cacert.pem"
}
storage "raft" {
path = "/opt/vault/data/"
# override via env var VAULT_RAFT_NODE_ID
node_id = "teepot-vault-0.teepot-vault"
# Parameter needed because of slow plugin loading
# may be relaxed for faster machines
# see also https://github.com/hashicorp/vault/issues/28009
performance_multiplier = 100
# autopilot_reconcile_interval = "120s"
# autopilot_update_interval = "60s"
retry_join {
leader_api_addr = "https://teepot-vault-0.teepot-vault:8210"
leader_ca_cert_file = "/opt/vault/cacert.pem"
leader_client_cert_file = "/opt/vault/tls/tls.crt"
leader_client_key_file = "/opt/vault/tls/tls.key"
}
retry_join {
leader_api_addr = "https://teepot-vault-1.teepot-vault:8210"
leader_ca_cert_file = "/opt/vault/cacert.pem"
leader_client_cert_file = "/opt/vault/tls/tls.crt"
leader_client_key_file = "/opt/vault/tls/tls.key"
}
retry_join {
leader_api_addr = "https://teepot-vault-2.teepot-vault:8210"
leader_ca_cert_file = "/opt/vault/cacert.pem"
leader_client_cert_file = "/opt/vault/tls/tls.crt"
leader_client_key_file = "/opt/vault/tls/tls.key"
}
}
# path of plugin binaries
plugin_directory = "/opt/vault/plugins"
# override via env var VAULT_API_ADDR
api_addr = "https://teepot-vault.teepot-vault:8210"
# override via env var VAULT_CLUSTER_ADDR
cluster_addr = "https://teepot-vault.teepot-vault:8211"