Automatically unsealing Vault drastically reduces the security of the stored secrets. That being said, there might be scenarios, in which this simple approach could be useful / sufficient.
This requires Vault to be started by a systemd-unit named vault.service, which typically is the case when installing from a distribution package.
The script vault-unseal.sh should be placed in /root and secured with 700 permissions.
| import time | |
| import logging | |
| import threading | |
| from xmlrpc.server import SimpleXMLRPCServer | |
| from xmlrpc.server import SimpleXMLRPCRequestHandler | |
| import xmlrpc.client | |
| LOG = logging.getLogger(__name__) | |
| #### Configuration for CCU #### |
| #!/usr/bin/python | |
| import os | |
| import sys | |
| import time | |
| import signal | |
| import logging | |
| import multiprocessing | |
| from multiprocessing import Process | |
| import SocketServer |
| #!/usr/bin/python3 | |
| import logging | |
| from pyhomematic import HMConnection | |
| logging.basicConfig(level=logging.WARNING) | |
| DEVICE = "KEQ1234567:1" | |
| PARAMETER = "STATE" | |
| CONNECTIONDATA = { | |
| "ccu3test": { | |
| "ip": "192.168.1.23", |
| <!DOCTYPE html> | |
| <html> | |
| <head> | |
| <meta charset="utf-8"> | |
| <meta name="viewport" content="width=device-width, initial-scale=1.0"> | |
| <meta name="description" content="A web interface for Home Assistant with WebSocket"> | |
| <title>Home Assistant with WebSocket</title> | |
| <link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet"> | |
| <script src='http://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js'></script> | |
| <script type="text/javascript"> |
| #! /usr/bin/env python | |
| #-*- coding: utf-8 -*- | |
| import json | |
| import httplib2 | |
| import time | |
| from datetime import datetime | |
| from datetime import timedelta | |
| from apiclient.discovery import build |