tech/sxchnge
1
0 Fork 0
Code Issues 6 Pull Requests 1 Actions Packages Projects 1 Releases Wiki Activity

Name the production Vault after the exch product

Browse Source 
The internal name of the product is exch, like its production server.
Paths, the Compose project, the Docker network, raft node ids and the
transit seal key and policy use it before the first rollout, so nothing
has to be renamed once data exists.
This commit is contained in:
protuberanets committed 2026-11-03 16:15:06 +03:00
1 parent 1b9a89d9c4
commit 4cdf71b7f8
6 files changed
+36 -36
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

infra/prod/vault/config/vault-1.hcl
+3 -3
View File
@@ -1,4 +1,4 @@
# SXCHNGE production Vault, node 1. Only api_addr, cluster_addr and node_id
# Production Vault, node 1. Only api_addr, cluster_addr and node_id
# differ between the three node files.
ui = true
disable_mlock = true
@@ -15,7 +15,7 @@ listener "tcp" {
storage "raft" {
path = "/vault/file"
node_id = "sxchnge-vault-1"
node_id = "exch-vault-1"
retry_join { leader_api_addr = "http://192.168.10.191:8200" }
retry_join { leader_api_addr = "http://192.168.10.191:8210" }
retry_join { leader_api_addr = "http://192.168.10.98:8200" }
@@ -26,5 +26,5 @@ storage "raft" {
seal "transit" {
address = "https://vault.sendico.io"
mount_path = "transit/"
key_name = "sxchnge-vault-unseal"
key_name = "exch-vault-unseal"
}
infra/prod/vault/config/vault-2.hcl
+3 -3
View File
@@ -1,4 +1,4 @@
# SXCHNGE production Vault, node 2. Only api_addr, cluster_addr and node_id
# Production Vault, node 2. Only api_addr, cluster_addr and node_id
# differ between the three node files.
ui = true
disable_mlock = true
@@ -15,7 +15,7 @@ listener "tcp" {
storage "raft" {
path = "/vault/file"
node_id = "sxchnge-vault-2"
node_id = "exch-vault-2"
retry_join { leader_api_addr = "http://192.168.10.191:8200" }
retry_join { leader_api_addr = "http://192.168.10.191:8210" }
retry_join { leader_api_addr = "http://192.168.10.98:8200" }
@@ -26,5 +26,5 @@ storage "raft" {
seal "transit" {
address = "https://vault.sendico.io"
mount_path = "transit/"
key_name = "sxchnge-vault-unseal"
key_name = "exch-vault-unseal"
}
infra/prod/vault/config/vault-3.hcl
+3 -3
View File
@@ -1,4 +1,4 @@
# SXCHNGE production Vault, node 3. Only api_addr, cluster_addr and node_id
# Production Vault, node 3. Only api_addr, cluster_addr and node_id
# differ between the three node files.
ui = true
disable_mlock = true
@@ -15,7 +15,7 @@ listener "tcp" {
storage "raft" {
path = "/vault/file"
node_id = "sxchnge-vault-3"
node_id = "exch-vault-3"
retry_join { leader_api_addr = "http://192.168.10.191:8200" }
retry_join { leader_api_addr = "http://192.168.10.191:8210" }
retry_join { leader_api_addr = "http://192.168.10.98:8200" }
@@ -26,5 +26,5 @@ storage "raft" {
seal "transit" {
address = "https://vault.sendico.io"
mount_path = "transit/"
key_name = "sxchnge-vault-unseal"
key_name = "exch-vault-unseal"
}
infra/prod/vault/exch.yml
+6 -6
View File
@@ -1,6 +1,6 @@
# SXCHNGE production Vault on exch: nodes 1 and 2 of three (#74). Node 3 runs
# Production Vault on exch: nodes 1 and 2 of three (#74). Node 3 runs
# on infra-gamma (gamma.yml). Ports are published on the private address only.
name: sxchnge-vault
name: exch-vault
x-vault: &vault
image: ${VAULT_IMAGE:?Run make prod-images and copy images.env}
@@ -29,7 +29,7 @@ services:
- ./config/vault-1.hcl:/vault/config/vault.hcl:ro
- ./start.sh:/etc/vault/start.sh:ro
networks:
sxchnge:
exch:
aliases: [vault]
vault-2:
@@ -42,7 +42,7 @@ services:
- ./config/vault-2.hcl:/vault/config/vault.hcl:ro
- ./start.sh:/etc/vault/start.sh:ro
networks:
sxchnge:
exch:
aliases: [vault]
secrets:
@@ -55,5 +55,5 @@ volumes:
# Applications on exch join this network and use http://vault:8200.
networks:
sxchnge:
name: sxchnge
exch:
name: exch
infra/prod/vault/gamma.yml
+2 -2
View File
@@ -1,6 +1,6 @@
# SXCHNGE production Vault on infra-gamma: node 3 of three (#74). It keeps a
# Production Vault on infra-gamma: node 3 of three (#74). It keeps a
# copy of the data off exch; nodes 1 and 2 run on exch (exch.yml).
name: sxchnge-vault
name: exch-vault
services:
vault-3: