Organize local infrastructure and Vault secrets by service ownership

infra/images/nats.Dockerfile

@@ -0,0 +1,10 @@
+ARG NATS_IMAGE
+ARG VAULT_IMAGE
+FROM ${NATS_IMAGE} AS nats
+FROM ${VAULT_IMAGE}
+USER root
+COPY --from=nats /nats-server /usr/local/bin/nats-server
+COPY infra/local/nats/start.sh /usr/local/bin/start-nats
+RUN mkdir -p /data /run/sxchnge && chown -R 100:1000 /data /run/sxchnge
+USER 100:1000
+ENTRYPOINT ["vault", "agent", "-config=/etc/agent/config.hcl"]