38 lines
743 B
Nix
38 lines
743 B
Nix
|
# SPDX-FileCopyrightText: 2025 Elias Coppens <elias.coppens@dgnum.eu>
|
||
|
|
#
|
||
|
|
# SPDX-License-Identifier: EUPL-1.2
|
||
|
|
|
||
|
|
let
|
||
|
|
host = "vault.dgnum.eu";
|
||
|
|
port = 3100;
|
||
|
|
clusterPort = 3101;
|
||
|
|
in
|
||
|
|
{
|
||
|
|
config = {
|
||
|
|
services.openbao = {
|
||
|
|
enable = true;
|
||
|
|
address = "127.0.0.1:${toString port}";
|
||
|
|
storageBackend = "raft";
|
||
|
|
|
||
|
|
listenerExtraConfig = ''
|
||
|
|
cluster_address = "0.0.0.0:${toString clusterPort}"
|
||
|
|
'';
|
||
|
|
|
||
|
|
storageConfig = ''
|
||
|
|
path = "/var/lib/raft"
|
||
|
|
node_id = "raft_storage01"
|
||
|
|
'';
|
||
|
|
|
||
|
|
extraConfig = ''
|
||
|
|
cluster_addr = "http://${host}:${toString clusterPort}"
|
||
|
|
api_addr = "https://${host}"
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
|
||
|
|
dgn-web.simpleProxies.openbao = {
|
||
|
|
inherit host port;
|
||
|
|
};
|
||
|
|
|
||
|
|
};
|
||
|
|
}
|