Git initial commit

roles/vault/templates/etc/systemd/system/vault.service.j2

@@ -0,0 +1,36 @@
+[Unit]
+Description=Vault agent
+Requires=network-online.target
+After=network-online.target
+
+[Service]
+User={{ vault_usr }}
+Group={{ vault_grp }}
+ProtectSystem=full
+ProtectHome=read-only
+PrivateTmp=yes
+PrivateDevices=yes
+SecureBits=keep-caps
+AmbientCapabilities=CAP_IPC_LOCK
+Capabilities=CAP_IPC_LOCK+ep
+CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK
+NoNewPrivileges=yes
+ExecStart={{ vault_link }}/vault server -config {{ vault_home }}/vault.conf.hcl
+ExecReload=/bin/kill --signal HUP $MAINPID
+ExecStop={{ vault_link }}/vault operator step-down
+KillMode=process
+KillSignal=SIGINT
+LimitMEMLOCK=infinity
+LimitNOFILE=65536
+PIDFile={{ vault_pid }}
+Restart=on-failure
+RestartSec=5
+StartLimitInterval=20
+StartLimitBurst=5
+TimeoutStartSec=30
+StandardOutput=append:{{ vault_log }}/vault.log
+StandardError=append:{{ vault_log }}/vault.err
+
+
+[Install]
+WantedBy=multi-user.target

roles/vault/templates/opt/vault/vault.conf.hcl.j2

@@ -0,0 +1,36 @@
+disable_mlock      = {{ vault_no_mlock }}
+ui                 = {{ vault_ui }}
+
+
+api_addr           = "{{ vault_api_addr }}"
+{% if vault_cluster_addr != '' %}
+cluster_addr       = "{{ vault_cluster_addr }}"
+cluster_name       = "{{ vault_cluster_name }}"
+disable_clustering = false
+{% else %}
+disable_clustering = true
+{% endif %}
+
+pid_file           = "{{ vault_pid }}"
+
+{{vault_storage.storage }} "{{ vault_storage.type }}" {
+  {{ vault_storage.conf }}
+}
+
+listener "tcp" {
+{% for key, value in vault_listener_tcp.items() %}
+  {{ key }} = "{{ value }}"
+{% endfor %}
+}
+
+{% for key, value in vault_config_options.items() %}
+{{ key }} = "{{ value }}"
+{% endfor %}
+
+{% for block in vault_config_blocks %}
+{{ block.conf }}{% if block.type is defined and block.type is not none and block.type != '' %} "{{ block.type }}"{% endif %} {
+{% filter indent(width=2) %}
+  {{ block.options }}
+{% endfilter %}
+}
+{% endfor %}