mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-09-15 20:14:59 +02:00
Update to 2025-08-29 16:00
This commit is contained in:
24
roles/vault_unseal/templates/vault-unseal.service.j2
Normal file
24
roles/vault_unseal/templates/vault-unseal.service.j2
Normal file
@@ -0,0 +1,24 @@
|
||||
[Unit]
|
||||
Description=Vault unsealing utility
|
||||
Documentation=https://github.com/lrstanley/vault-unseal
|
||||
Wants=network-online.target
|
||||
After=network-online.target
|
||||
|
||||
[Service]
|
||||
User=vault-unseal
|
||||
Group=vault-unseal
|
||||
ExecStart=/usr/local/bin/vault-unseal --config /etc/vault-unseal.yaml
|
||||
Restart=always
|
||||
RestartSec=10
|
||||
StartLimitInterval=0
|
||||
TimeoutStopSec=10s
|
||||
KillMode=mixed
|
||||
KillSignal=SIGQUIT
|
||||
|
||||
PrivateDevices=true
|
||||
ProtectHome=true
|
||||
ProtectSystem=full
|
||||
PrivateTmp=true
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
Reference in New Issue
Block a user