vault {
  address = "http://openbao:8200"
}

auto_auth {
  method "approle" {
    mount_path = "auth/approle"
    config = {
      role_id_file_path   = "/openbao/approle/role-id"
      secret_id_file_path = "/openbao/approle/secret-id"
    }
  }

  sink "file" {
    config = {
      path = "/tmp/openbao-token"
      mode = 0600
    }
  }
}

listener "tcp" {
  address     = "0.0.0.0:8201"
  tls_disable = true
}

api_proxy {
  use_auto_auth_token = true
}

cache {
  use_auto_auth_token = true
}

log_level = "info"