# Vault Service TLS Configuration Fragment

[[elements]]
border_bottom = false
border_top = true
name = "vault_tls_header"
title = "🔒 TLS Configuration"
type = "section_header"

[[elements]]
default = false
help = "Enable TLS certificate verification for secure connections"
name = "vault_tls_verify"
nickel_path = ["vault_service", "tls", "verify"]
prompt = "Verify TLS Certificates"
type = "confirm"

[[elements]]
condition = "vault_tls_verify == true"
default = ""
help = "Path to CA certificate file for TLS verification"
name = "vault_tls_ca_cert_path"
nickel_path = ["vault_service", "tls", "ca_cert_path"]
prompt = "CA Certificate Path"
required = false
type = "text"

[[elements]]
condition = "vault_tls_verify == true"
default = ""
help = "Path to client certificate file (optional)"
name = "vault_tls_client_cert_path"
nickel_path = ["vault_service", "tls", "client_cert_path"]
prompt = "Client Certificate Path (optional)"
required = false
type = "text"

[[elements]]
condition = "vault_tls_verify == true"
default = ""
help = "Path to client key file (optional)"
name = "vault_tls_client_key_path"
nickel_path = ["vault_service", "tls", "client_key_path"]
prompt = "Client Key Path (optional)"
required = false
type = "text"
