nomad
/
acme-to-vault
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update rendered example

This commit is contained in:
Daniel Berteaud 2024-03-05 14:42:27 +01:00
parent f438e820dc
commit 625cac8f6b
3 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
acme-to-vault.nomad.hcl
View File

@ -68,7 +68,7 @@ ACME_[[ $acc_idx ]]_CHALLENGE=[[ $account.challenge ]]
ACME_[[ $acc_idx ]]_DNS_PROVIDER=[[ $account.dns_provider ]]
ACME_[[ $acc_idx ]]_DNS_KEY_ENV=[[ $account.dns_key_env ]]
ACME_[[ $acc_idx ]]_DNS_KEY_VALUE=[[ $account.dns_key_value ]]
[[ if has $account "dns_resolvers" ]]
[[- if has $account "dns_resolvers" ]]
ACME_[[ $acc_idx ]]_DNS_RESOLVERS=[[ join $account.dns_resolvers "," ]]
[[- end ]]
[[- else ]]
@ -83,7 +83,7 @@ ACME_[[ $acc_idx ]]_CERT_[[ $crt_idx ]]=[[ $crt ]]
[[- end ]]
[[- end ]]
_EOT
destination = "secrets/acm-to-vault.env"
destination = "secrets/acme-to-vault.env"
perms = 0400
env = true
}

2
example/acme-to-vault.nomad.hcl
View File

@ -99,7 +99,7 @@ MINIT_MAIN_CRON=22 0 * * *
MINIT_MAIN_IMMEDIATE=true
ACME_KV_ACCOUNT_ROOT=kv/service/acme-to-vault/account
_EOT
destination = "secrets/acm-to-vault.env"
destination = "secrets/acme-to-vault.env"
perms = 0400
env = true
}

10
example/vault/policies/acme-to-vault.hcl
View File

@ -1,17 +1,17 @@
path "/kv/data/service/+/certs/*" {
path "kv/data/service/+/certs/*" {
capabilities = ["read","create","update"]
}
path "/kv/metadata/service/+/certs" {
path "kv/metadata/service/+/certs" {
capabilities = ["list","read"]
}
path "/kv/data/service/acme-to-vault/account/*" {
path "kv/data/service/acme-to-vault/account/*" {
capabilities = ["read","create","update"]
}
path "/kv/metadata/service/acme-to-vault/account/*" {
path "kv/metadata/service/acme-to-vault/account/*" {
capabilities = ["list","read"]
}
path "/kv/data/service/acme-to-vault" {
path "kv/data/service/acme-to-vault" {
capabilities = ["read"]
}