Skip to content

Instantly share code, notes, and snippets.

@afquinterog

afquinterog/Vault.service

Last active June 20, 2019 13:50
Show Gist options
  • Save afquinterog/9396eb9d37ea5a55903ae5d88b4ea51b to your computer and use it in GitHub Desktop.
Save afquinterog/9396eb9d37ea5a55903ae5d88b4ea51b to your computer and use it in GitHub Desktop.
Download ZIP
Vault service
Raw
Vault.service
[Unit]
Description=Vault
Documentation=https://vaultproject.io/docs/
After=network.target
ConditionFileNotEmpty=/etc/vault.d/vault.hcl
[Service]
User=ubuntu
Group=ubuntu
ExecStart=/usr/local/bin/vault server -config=/etc/vault.d/vault.hcl
ExecReload=/usr/local/bin/kill --signal HUP $MAINPID
CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK
AmbientCapabilities=CAP_IPC_LOCK
SecureBits=keep-caps
NoNewPrivileges=yes
KillSignal=SIGINT
LimitMEMLOCK=infinity
[Install]
WantedBy=multi-user.target
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment