immich/vault/policies/immich.hcl

path "[[ .vault.prefix ]]database/creds/[[ .immich.instance ]]" {
  capabilities = ["read"]
}