Files
ansible-roles/roles/vault_unseal/templates/vault-unseal.service.j2
2025-08-29 16:00:23 +02:00

25 lines
487 B
Django/Jinja

[Unit]
Description=Vault unsealing utility
Documentation=https://github.com/lrstanley/vault-unseal
Wants=network-online.target
After=network-online.target
[Service]
User=vault-unseal
Group=vault-unseal
ExecStart=/usr/local/bin/vault-unseal --config /etc/vault-unseal.yaml
Restart=always
RestartSec=10
StartLimitInterval=0
TimeoutStopSec=10s
KillMode=mixed
KillSignal=SIGQUIT
PrivateDevices=true
ProtectHome=true
ProtectSystem=full
PrivateTmp=true
[Install]
WantedBy=multi-user.target