bookstack/vault/policies/bookstack.hcl

path "[[ .vault.prefix ]]database/creds/[[ .instance ]]" {
  capabilities = ["read"]
}

path "[[ .vault.prefix ]]kv/data/service/bookstack" {
  capabilities = ["read"]
}