[vault.ha]
enabled = true
mode = "raft"

[vault.logging]
format = "json"
level = "info"

[vault.monitoring]
enabled = true
metrics_interval = 30

[vault.security]
encryption_algorithm = "aes-256-gcm"
key_rotation_days = 30

[vault.server]
host = "0.0.0.0"
keep_alive = 75
max_connections = 500
port = 8200
workers = 16

[vault.storage]
backend = "etcd"
encryption_key_path = "/var/lib/provisioning/vault/master.key"
path = "/var/lib/provisioning/vault/data"

[vault.vault]
deployment_mode = "Service"
key_name = "provisioning-enterprise"
mount_point = "transit"
server_url = "https://vault-ha:8200"
storage_backend = "etcd"
tls_ca_cert = "/etc/vault/ca.crt"
tls_verify = true