[vault.ha]
enabled = false
mode = "raft"

[vault.logging]
format = "json"
level = "warn"

[vault.monitoring]
enabled = false
metrics_interval = 60

[vault.security]
encryption_algorithm = "aes-256-gcm"
key_rotation_days = 90

[vault.server]
host = "0.0.0.0"
keep_alive = 75
max_connections = 200
port = 8200
workers = 8

[vault.storage]
backend = "memory"
encryption_key_path = "/tmp/provisioning-vault-cicd/master.key"
path = "/tmp/provisioning-vault-cicd"

[vault.vault]
deployment_mode = "Service"
key_name = "provisioning-cicd"
mount_point = "transit-cicd"
server_url = "http://vault-cicd:8200"
storage_backend = "memory"
tls_verify = false