roles/vault/vault.yml: Add playbook

2 files changed, 45 insertions, 0 deletions

diff --git a/roles/vault/files/config.json b/roles/vault/files/config.json
new file mode 100644
index 0000000..3ca5a3d
--- /dev/null
+++ b/roles/vault/files/config.json
@@ -0,0 +1,15 @@
+ui = true
+
+storage "file" {
+  path    = "/opt/vault/data"
+}
+
+listener "tcp" {
+  address     = "0.0.0.0:8100"
+  tls_disable = 1
+}
+
+telemetry {
+  prometheus_retention_time = "30s",
+  disable_hostname = true
+}
diff --git a/roles/vault/files/supervisord.conf b/roles/vault/files/supervisord.conf
new file mode 100644
index 0000000..e736361
--- /dev/null
+++ b/roles/vault/files/supervisord.conf
@@ -0,0 +1,30 @@
+; Supervisor config file.
+
+[program:vault]
+command=/opt/vault/vault server -config /opt/vault/config.json
+directory=/opt/%(program_name)s
+stopasgroup=true
+stdout_logfile=/var/log/%(program_name)s.log
+stdout_logfile_maxbytes=0
+stdout_logfile_backups=0
+redirect_stderr=true
+user=%(program_name)s
+
+[inet_http_server]
+port = 9100
+username = vault
+password = vault
+
+[unix_http_server]
+file=/run/supervisord.sock
+
+[supervisord]
+logfile=/var/log/supervisord.log
+loglevel=info
+user=root
+
+[rpcinterface:supervisor]
+supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface
+
+[supervisorctl]
+serverurl=unix:///run/supervisord.sock