---

- name: Deploy vault-unseal configuration
  template: src=vault-unseal.yaml.j2 dest=/etc/vault-unseal.yaml owner=root group={{ vault_unseal_user }} mode=440
  notify: restart vault-unseal
  tags: vault