global:
  enabled: true

server:
  # ha:
  #   enabled: true
  #   config: |
  #     ui = true

  #     listener "tcp" {
  #       address = "[::]:8200"
  #       cluster_address = "[::]:8201"
  #     }

  #     storage "file" {
  #       path = "/vault/data"
  #     }

  #   raft:
  #     enabled: true

  standalone:
    enabled: true
    config: |
      ui = true

      listener "tcp" {
        tls_disable = 1
        address = "[::]:8200"
        cluster_address = "[::]:8201"
      }
      storage "file" {
        path = "/vault/data"
      }

    dataStorage:
      enabled: true
      size: 32Gi
      storageClass: null
      accessMode: ReadWriteOnce


  ingress:
    enabled: true
    annotations:
      cert-manager.io/cluster-issuer: letsencrypt-prod
      kubernetes.io/ingress.class: nginx
    hosts:
      - host: vault.ducoterra.net
        paths:
          - /

    tls:
    - hosts:
      - vault.ducoterra.net
      secretName: vault-tls-cert

ui:
  enabled: true
  serviceType: ClusterIP