vault.hcl

listener "tcp" {
  address       = "[::]:8200"
  tls_cert_file = "/etc/vault.d/tls/cert.pem"
  tls_key_file  = "/etc/vault.d/tls/key.pem"

  tls_require_and_verify_client_cert = false
  tls_disable_client_certs           = true
}

storage "raft" {
  path    = "/opt/vault/data"
  node_id = $hostname
}

license_path = "/etc/vault.d/license.hclic"

api_addr      = "https://$fqdn:8200"
cluster_addr  = "https://$fqdn:8201"
disable_mlock = true
ui            = true