infrastructure/machines/nixos/storage01/vault.nix

# SPDX-FileCopyrightText: 2025 Elias Coppens <elias.coppens@dgnum.eu>
#
# SPDX-License-Identifier: EUPL-1.2

let
  host = "vault.dgnum.eu";
  port = 3100;
  clusterPort = 3101;
in
{
  config = {
    services.openbao = {
      enable = true;
      address = "127.0.0.1:${toString port}";
      storageBackend = "raft";

      listenerExtraConfig = ''
        cluster_address = "0.0.0.0:${toString clusterPort}"
      '';

      storageConfig = ''
        path = "/var/lib/raft"
        node_id = "raft_storage01"
      '';

      extraConfig = ''
        cluster_addr = "http://${host}:${toString clusterPort}"
        api_addr = "https://${host}"
      '';
    };

    dgn-web.simpleProxies.openbao = {
      inherit host port;
    };

  };
}