ui = true
api_addr = "https://0.0.0.0:8200"
default_lease_ttl = "2304h"
max_lease_ttl = "2304h"
disable_mlock = true

storage "file" {
  path = "/opt/vault/data"
}

listener "tcp" {
  address = "0.0.0.0:8200"
  tls_cert_file = "/opt/vault/certs/vault.crt"
  tls_key_file = "/opt/vault/certs/vault.key"
  tls_client_ca_file = "/opt/vault/certs/rootCA.pem"
}

user_lockout "all" {
  lockout_threshold = 25
  lockout_duration = "60m"
  lockout_counter_reset = "60m"
}