c12s-kubespray/roles/vault/templates/host.service.j2

[Unit]
Description=vault
After=network.target

[Service]
AmbientCapabilities=CAP_IPC_LOCK
ExecStart={{ bin_dir }}/vault server --config={{ vault_config_dir }}/config.json
LimitNOFILE=40000
NotifyAccess=all
Restart=always
RestartSec=10s
User={{ vault_adduser_vars.name }}

[Install]
WantedBy=multi-user.target
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`[Unit]`
			`Description=vault`
			`After=network.target`

			`[Service]`
			`AmbientCapabilities=CAP_IPC_LOCK`
Service file binary place mismatch According to cluster/binary.yml vault binary will be placed to `{{ bin_dir }}` and according to `inventory/sample/group_vars/all.yml` that is `inventory/sample/group_vars/all.yml` 2018-08-06 11:44:13 +00:00			`ExecStart={{ bin_dir }}/vault server --config={{ vault_config_dir }}/config.json`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`LimitNOFILE=40000`
			`NotifyAccess=all`
			`Restart=always`
			`RestartSec=10s`
			`User={{ vault_adduser_vars.name }}`

			`[Install]`
			`WantedBy=multi-user.target`