Skip to content

Instantly share code, notes, and snippets.

@a-nldisr

a-nldisr/vault.service

Created August 13, 2018 15:20
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save a-nldisr/e882a7ccb77dda36c8f454d80cc1af8a to your computer and use it in GitHub Desktop.
Save a-nldisr/e882a7ccb77dda36c8f454d80cc1af8a to your computer and use it in GitHub Desktop.
Download ZIP
Raw
vault.service
[Unit]
Description=vault server
Documentation=https://vaultproject.io/docs/
After=network.target
ConditionFileNotEmpty=/etc/vault/vault-config.hcl
[Service]
User=vault
Group=vault
PrivateDevices=yes
PrivateTmp=yes
ProtectSystem=full
ProtectHome=read-only
SecureBits=keep-caps
Capabilities=CAP_IPC_LOCK+ep
CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK
NoNewPrivileges=yes
TimeoutStopSec=30s
Restart=on-failure
StartLimitInterval=60s
StartLimitBurst=3
EnvironmentFile=-/etc/sysconfig/vault
Restart=on-failure
ExecStart=/usr/local/sbin/vault server $OPTIONS -config=/etc/vault/vault-config.hcl
ExecStop=/usr/local/bin/vault step-down
[Install]
WantedBy=multi-user.target
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment