vault configuration file

1,268 views
Skip to first unread message

Andy Lee

unread,
Jul 23, 2015, 4:08:33 PM7/23/15
to Vault
Hi guys,

Is there a way to set the path from an environment variable in the configuration? 

My configuration looks like this:

backend "file" {
  path = "$HOME/vault"
}

listener "tcp" {
  address = "0.0.0.0:8200"
  tls_cert_file = "/etc/pki/tls/certs/vault.crt"
  tls_key_file = "/etc/pki/tls/private/vault.key"
}

Of course, $HOME isn't evaluated so vault created a $HOME directory.

I think later down the line, I'd just set it somewhere in /opt but I was just wondering if there was a way to load environment variables.

Thanks!
Andy


Armon Dadgar

unread,
Jul 23, 2015, 4:11:57 PM7/23/15
to vault...@googlegroups.com, Andy Lee
Hey Andy,

At the current time its just a static configuration file,
we do not plan any sort of dynamic evaluation for it.

Best Regards,
Armon Dadgar
--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/hashicorp/vault/issues
IRC: #vault-tool on Freenode
---
You received this message because you are subscribed to the Google Groups "Vault" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vault-tool+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/vault-tool/eb90db22-cef1-4872-831f-8ef1ce211920%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Andy Lee

unread,
Jul 23, 2015, 4:29:10 PM7/23/15
to Vault, armon....@gmail.com
Hi Armon,

Thanks for the reply. I was also wondering how do you change the log level to be more verbose? I see that by default it's just info. How would I set it to debug?

On Thursday, July 23, 2015 at 1:11:57 PM UTC-7, Armon Dadgar wrote:
Hey Andy,

At the current time its just a static configuration file,
we do not plan any sort of dynamic evaluation for it.

Best Regards,
Armon Dadgar

Armon Dadgar

unread,
Jul 23, 2015, 4:31:19 PM7/23/15
to Vault, Andy Lee
Andy,

I believe there is a log level configuration parameter you can tune.
Hope that helps!

Best Regards,
Armon Dadgar

Andy Lee

unread,
Jul 23, 2015, 4:32:47 PM7/23/15
to Vault, armon....@gmail.com
Got it!

General Options:

  -config=<path>      Path to the configuration file or directory. This can be
                      specified multiple times. If it is a directory, all
                      files with a ".hcl" or ".json" suffix will be loaded.

  -dev                Enables Dev mode. In this mode, Vault is completely
                      in-memory and unsealed. Do not run the Dev server in
                      production!

  -log-level=info     Log verbosity. Defaults to "info", will be outputted

Thanks!!!

On Thursday, July 23, 2015 at 1:31:19 PM UTC-7, Armon Dadgar wrote:
Andy,

I believe there is a log level configuration parameter you can tune.
Hope that helps!

Best Regards,
Armon Dadgar
Reply all
Reply to author
Forward
0 new messages