vault_user: vault
vault_group: vault
vault_dir: /opt/vault
vault_extract_dir: /opt/docker
vault_port: 8080
vault_websocket_port: 3012
vault_supervised: yes

vault_default_config:
  database_url: "{{ 'postgresql://' ~ database_user ~ ':' ~ database_pass ~ '@' ~ database_host ~ '/' ~ database_name }}"
  domain: "{{ host_url }}"
  invitation_org_name: "{{ org }}"
  admin_token: "{{ vault_admin_token }}"
  rocket_port: "{{ vault_port }}"
  websocket_port: "{{ vault_websocket_port }}"

  org_attachment_limit: "{{ ((host_hardware.disk | d(10) | float) * 1024 * 1024 / 30) | int | abs }}"
  user_attachment_limit: "{{ ((host_hardware.disk | d(10) | float) * 1024 * 1024 / 90) | int | abs }}"

  database_max_conns: 4
  websocket_enabled: yes
  websocket_address: 127.0.0.1
  sends_allowed: yes
  emergency_access_allowed: no
  extended_logging: yes
  use_syslog: yes
  log_level: warn
  db_connection_retries: 0
  icon_blacklist_non_global_ips: no
  email_attempts_limit: 6
  email_expiration_time: 2400
  signups_allowed: no
  signups_verify: yes
  signups_verify_resend_time: 120
  signups_verify_resend_limit: 10
  org_creation_users: all
  invitations_allowed: yes
  incomplete_2fa_time_limit: 5
  trash_auto_delete_days: 90
  password_iterations: 5000
  rocket_address: 127.0.0.1
  rocket_workers: 4
  _enable_yubico: no
  _enable_duo: no