xoxys.vault/templates/etc/containers/systemd/vault.container.j2

35 lines
847 B
Django/Jinja

#jinja2: lstrip_blocks: True
{{ ansible_managed | comment }}
[Install]
WantedBy=default.target
[Service]
Restart=on-failure
RestartSec=5s
ExecReload=/usr/bin/podman kill --signal=SIGHUP {{ __vault_container_name }}
[Container]
Image={{ vault_image }}
ContainerName={{ __vault_container_name }}
Exec=/usr/local/bin/docker-entrypoint.sh server
EnvironmentFile=/etc/containers/systemd/vault.env
{% for item in vault_volumes %}
Volume={{ item.name }}:{{ item.dest }}:Z
{% endfor %}
{% if vault_cap_add | length > 0 %}
AddCapability={{ vault_cap_add | join(" ") }}
{% endif %}
{% if vault_cap_drop | length > 0 %}
DropCapability={{ vault_cap_drop | join(" ") }}
{% endif %}
Network={{ vault_network }}
{% for item in vault_exposed_ports %}
PublishPort={{ item }}
{% endfor %}
{% for item in vault_podman_args %}
PodmanArgs={{ item }}
{% endfor %}