global:
  enabled: true

server:

  standalone:
    enabled: true
    config: |
      ui = true

      listener "tcp" {
        tls_disable = 1
        address = "[::]:8200"
        cluster_address = "[::]:8201"
      }
      storage "file" {
        path = "/vault/data"
      }

  dataStorage:
    enabled: true
    size: 32Gi
    storageClass: null
    accessMode: ReadWriteOnce

  ingress:
    enabled: true
    annotations:
      cert-manager.io/cluster-issuer: letsencrypt-prod
      kubernetes.io/ingress.class: nginx
    hosts:
      - host: vault.ducoterra.net
        paths:
          - /

    tls:
    - hosts:
      - vault.ducoterra.net
      secretName: vault-tls-cert

ui:
  enabled: true
  serviceType: ClusterIP