pid_file = "/tmp/pidfile"

vault {
  address = "https://10.6.2.1:8200"
  tls_skip_verify = true
  retry {
    num_retries = 5
  }
}

auto_auth {
  method "approle" {
    mount_path = "auth/approle"
    config = {
      role_id_file_path                   = "/vault-auth/role_id"
      secret_id_file_path                 = "/vault-auth/wrapped_secret_id"
      secret_id_response_wrapping_path    = "auth/approle/role/triage_agent/secret-id"
      remove_secret_id_file_after_reading = false
    }
  }
  # sink не нужен, если приложению не требуется сам токен Vault
}

template {
  source      = "/vault-template/template.ctmpl"
  destination = "/vault-secrets/.env"
  error_on_missing_key = true
  perms = "0644"
}