Match the platform Vault on UI, mlock and the TLS flag
The UI stays reachable on the private addresses only. Integrated raft storage runs with mlock disabled, as on the platform Vault and as Vault recommends for raft.
This commit is contained in:
1 parent
f436b2528c
commit
2f74d3627e
3 files changed
+9
-9
No files matched your search
@@ -1,7 +1,7 @@
|
||||
# SXCHNGE production Vault, node 1. Only api_addr, cluster_addr and node_id
|
||||
# differ between the three node files.
|
||||
ui = false
|
||||
disable_mlock = false
|
||||
ui = true
|
||||
disable_mlock = true
|
||||
api_addr = "http://192.168.10.191:8200"
|
||||
cluster_addr = "https://192.168.10.191:8201"
|
||||
|
||||
@@ -10,7 +10,7 @@ listener "tcp" {
|
||||
cluster_address = "0.0.0.0:8201"
|
||||
# Plain HTTP on the private network; raft and request forwarding on the
|
||||
# cluster port are encrypted by Vault itself.
|
||||
tls_disable = true
|
||||
tls_disable = 1
|
||||
}
|
||||
|
||||
storage "raft" {
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
# SXCHNGE production Vault, node 2. Only api_addr, cluster_addr and node_id
|
||||
# differ between the three node files.
|
||||
ui = false
|
||||
disable_mlock = false
|
||||
ui = true
|
||||
disable_mlock = true
|
||||
api_addr = "http://192.168.10.191:8210"
|
||||
cluster_addr = "https://192.168.10.191:8211"
|
||||
|
||||
@@ -10,7 +10,7 @@ listener "tcp" {
|
||||
cluster_address = "0.0.0.0:8201"
|
||||
# Plain HTTP on the private network; raft and request forwarding on the
|
||||
# cluster port are encrypted by Vault itself.
|
||||
tls_disable = true
|
||||
tls_disable = 1
|
||||
}
|
||||
|
||||
storage "raft" {
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
# SXCHNGE production Vault, node 3. Only api_addr, cluster_addr and node_id
|
||||
# differ between the three node files.
|
||||
ui = false
|
||||
disable_mlock = false
|
||||
ui = true
|
||||
disable_mlock = true
|
||||
api_addr = "http://192.168.10.98:8200"
|
||||
cluster_addr = "https://192.168.10.98:8201"
|
||||
|
||||
@@ -10,7 +10,7 @@ listener "tcp" {
|
||||
cluster_address = "0.0.0.0:8201"
|
||||
# Plain HTTP on the private network; raft and request forwarding on the
|
||||
# cluster port are encrypted by Vault itself.
|
||||
tls_disable = true
|
||||
tls_disable = 1
|
||||
}
|
||||
|
||||
storage "raft" {
|
||||
|
||||
Reference in new issue
Block a user