Skip to content

Instantly share code, notes, and snippets.

@martezr
Created July 19, 2018 18:06
Show Gist options
  • Save martezr/db8df44251b01c11eb8a045ee66dabab to your computer and use it in GitHub Desktop.
Save martezr/db8df44251b01c11eb8a045ee66dabab to your computer and use it in GitHub Desktop.
HashiCorp Vault SystemD
[Unit]
Description=secrets management server
Documentation=https://vaultproject.io/docs/
After=network.target
ConditionFileNotEmpty=/opt/vault/config/vault-config.hcl
[Service]
User=vault
Group=vault
ExecStart=/usr/local/bin/vault server -config=/opt/vault/config/vault-config.hcl
ExecReload=/usr/local/bin/kill --signal HUP $MAINPID
CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK
Capabilities=CAP_IPC_LOCK+ep
SecureBits=keep-caps
NoNewPrivileges=yes
KillSignal=SIGINT
LimitMEMLOCK=infinity
[Install]
WantedBy=multi-user.target
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment