listener "{{ config.listen_protocol }}" { address = "{{ config.listen_address }}:{{ config.listen_port }}" tls_disable = {{ config.tls_disable }} {%- if self_signed_cert.enabled %} tls_cert_file = "/etc/vault/{{ self_signed_cert.hostname }}.pem" tls_key_file = "/etc/vault/{{ self_signed_cert.hostname }}-nopass.key" {% else -%} {%- if config.tls_cert_file %} tls_cert_file = "{{ config.tls_cert_file }}" {% endif -%} {%- if config.tls_key_file %} tls_key_file = "{{ config.tls_key_file }}" {% endif -%} {% endif -%} } {%- if config.backend and config.backend.type == "s3" %} backend "s3" { bucket = "{{ config.backend.bucket }}" } {% endif -%} {%- if config.storage and config.storage.type == "consul" %} storage "consul" { address = "{{ config.storage.address }}" path = "{{ config.storage.path }}" } {%- else %} storage "file" { path = "{{ config.data_dir }}" } {% endif %} default_lease_ttl="{{ config.default_lease_ttl }}" max_lease_ttl="{{ config.max_lease_ttl }}"