fixup config files and policies

.gitignore

@@ -1,2 +1,3 @@
 cert-manager/
 certs/
+backups/

helm/ha.yaml

@@ -22,7 +22,7 @@ server:
         }
 
         seal "transit" {
-          address = "https://pivault.dnet"
+          address = "http://3.14.3.104:8200"
           disable_renewal = "false"
           key_name = "autounseal"
           mount_path = "transit/"

helm/pivault.yaml

@@ -13,7 +13,7 @@ server:
     config: |
       ui = true
 
-      listener "tcp" {
+      listener "tcp" {z
         tls_disable = 1
         address = "[::]:8200"
         cluster_address = "[::]:8201"
@@ -46,4 +46,4 @@ server:
 
 ui:
   enabled: true
-  serviceType: ClusterIP
+  serviceType: LoadBalancer

policies/ducoterra.hcl

@@ -13,3 +13,11 @@ path "secret/*" {
 path "dnet_inter/*" {
     capabilities = ["create", "read", "update", "delete", "list"]
 }
+
+path "ssh-client-signer/*" {
+    capabilities = ["create", "read", "update", "delete", "list"]
+}
+
+path "ssh-host-signer/*" {
+    capabilities = ["create", "read", "update", "delete", "list"]
+}