[vault.ha]
enabled = false
mode = "raft"

[vault.logging]
format = "json"
level = "info"

[vault.monitoring]
enabled = true
metrics_interval = 60

[vault.security]
encryption_algorithm = "aes-256-gcm"
key_rotation_days = 90

[vault.server]
host = "0.0.0.0"
keep_alive = 75
max_connections = 100
port = 8200
workers = 4

[vault.storage]
backend = "surrealdb"
encryption_key_path = "/var/lib/provisioning/vault/master.key"
path = "/var/lib/provisioning/vault/data"

[vault.vault]
deployment_mode = "Service"
key_name = "provisioning-master"
mount_point = "transit"
server_url = "http://localhost:8200"
storage_backend = "surrealdb"
tls_verify = false