marco
/
zivildienst
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Do not expose Vault

This commit is contained in:
Marco Streich 2021-01-22 18:03:01 +01:00
parent 908b46a62b
commit 89d7f4c1ae
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
infrastructure/modules/compute/nix/vault.nix
View File

@ -2,7 +2,7 @@
{
services.vault.enable = true;
services.vault.package = pkgs.vault-bin;
services.vault.address = "0.0.0.0:8200";
services.vault.address = "10.0.1.51:8200";
services.vault.storageBackend = "postgresql";
services.vault.storageConfig = "
connection_url = \"postgres://vault:" + (builtins.readFile /opt/cloud-init-misc-data/vault_db_password) + "@localhost:5432/vault?sslmode=disable\"