ui = true

listener "tcp" {
  address = "€# lookup('env','VAULT_HTTP_BIND') | default('0.0.0.0', true) #€:€# lookup('env','VAULT_HTTP_PORT') | default(8200, true) #€"
  cluster_address = "€# lookup('env','VAULT_CLUSTER_BIND') | default('0.0.0.0', true) #€:€# lookup('env','VAULT_CLUSTER_PORT') | default(8201, true) #€"
  tls_cert_file = "€# layerops_tls_cert_file #€"
  tls_key_file = "€# layerops_tls_key_file #€"
  tls_disable_client_certs = "true"
}

api_addr = "https://{{ wireguard.privateIp }}:€# lookup('env','VAULT_HTTP_PORT') | default(8200, true) #€"
cluster_addr = "https://{{ wireguard.privateIp }}:€# lookup('env','VAULT_CLUSTER_PORT') | default(8201, true) #€"

telemetry {
  disable_hostname = true
  prometheus_retention_time = "1h"
}