From 89d7f4c1ae0528f8833f5cd2e1270d63361e1c00 Mon Sep 17 00:00:00 2001
From: Marco Streich <marco.streich@raisenow.com>
Date: Fri, 22 Jan 2021 18:03:01 +0100
Subject: [PATCH] Do not expose Vault

---
 infrastructure/modules/compute/nix/vault.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/infrastructure/modules/compute/nix/vault.nix b/infrastructure/modules/compute/nix/vault.nix
index b8404a0..2d5e352 100644
--- a/infrastructure/modules/compute/nix/vault.nix
+++ b/infrastructure/modules/compute/nix/vault.nix
@@ -2,7 +2,7 @@
 {
   services.vault.enable = true;
   services.vault.package = pkgs.vault-bin;
-  services.vault.address = "0.0.0.0:8200";
+  services.vault.address = "10.0.1.51:8200";
   services.vault.storageBackend = "postgresql";
   services.vault.storageConfig = "
     connection_url = \"postgres://vault:" + (builtins.readFile /opt/cloud-init-misc-data/vault_db_password) + "@localhost:5432/vault?sslmode=disable\"