Files
evangelostsak 1a2bbb3c97 feat(openbao): export the previous seal key to the container while rotating
The seal stanza resolves both keys through env://, so the previous one has to
reach the container's environment for the rotation to resolve at all.
2026-09-15 02:14:59 +02:00

8 lines
283 B
Django/Jinja

{% include 'roles/sys-svc-container/templates/env.j2' %}
OPENBAO_SEAL_KEY={{ OPENBAO_SEAL_KEY | dotenv_quote }}
{% if OPENBAO_SEAL_ROTATING | bool %}
OPENBAO_SEAL_KEY_PREVIOUS={{ OPENBAO_SEAL_KEY_PREVIOUS | dotenv_quote }}
{% endif %}
BAO_ADDR=http://127.0.0.1:{{ container_port }}