Skip to content

Instantly share code, notes, and snippets.

@yunano

yunano/vault.service

Last active August 17, 2023 08:51
Show Gist options
  • Star 18 You must be signed in to star a gist
  • Fork 7 You must be signed in to fork a gist
  • Save yunano/66caf8c5ed993bb2f4e3 to your computer and use it in GitHub Desktop.
Save yunano/66caf8c5ed993bb2f4e3 to your computer and use it in GitHub Desktop.
Download ZIP
/etc/systemd/system/vault.service
Raw
vault.service
[Unit]
Description=vault server
Requires=network-online.target
After=network-online.target consul.service
[Service]
EnvironmentFile=-/etc/sysconfig/vault
Restart=on-failure
ExecStart=/usr/local/sbin/vault server $OPTIONS -config=/etc/vault.d
ExecStartPost=/bin/bash -c "for key in $KEYS; do /usr/local/sbin/vault unseal $CERT $key; done"
[Install]
WantedBy=multi-user.target
@bramswenson
Copy link

bramswenson commented Nov 12, 2017 •
edited

Also, this file would not safely stop vault on shutdown.

This would be much safer...

ExecStop=/full/path/to/vault step-down

@okeddie
Copy link

okeddie commented Dec 30, 2018

this has moved upstream
https://learn.hashicorp.com/vault/operations/ops-deployment-guide

@vjanssens
Copy link

Or you could use the official service file, provided by hashicorp: https://raw.githubusercontent.com/hashicorp/vault/v1.12.0/.release/linux/package/usr/lib/systemd/system/vault.service

@ilanni2460
Copy link

vim /etc/systemd/system/multi-user.target.wants/vault.service

Environment="VAULT_ADDR=https://vlt-uat-app-02.intranet.ilanni.com:8200"
ExecStartPost=/usr/bin/vault operator unseal 2rMyAS1PzBtuGTc/ArxCnb6xdB

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment