infrastructure/machines/nixos/storage01/vault.nix

# SPDX-FileCopyrightText: 2025 Elias Coppens <elias.coppens@dgnum.eu>
#
# SPDX-License-Identifier: EUPL-1.2

let
  host = "vault.dgnum.eu";
  port = 3100;
  clusterPort = 3101;
in
{
  config = {
    services.openbao = {
      enable = true;
      address = "127.0.0.1:${toString port}";
      storageBackend = "raft";

      listenerExtraConfig = {
        cluster_address = "0.0.0.0:${toString clusterPort}";
      };

      storageConfig = {
        path = "/var/lib/raft";
        node_id = "raft_storage01";
      };

      extraConfig = {
        cluster_addr = "http://${host}:${toString clusterPort}";
        api_addr = "https://${host}";
      };
    };

    dgn-web.simpleProxies.openbao = {
      inherit host port;
    };

  };
}