One of three Vault VMs.
One of these VMs runs on each of the VM hosts. I'm using Vault's integrated Raft storage, so having a cluster of three VMs allows one to go down without interrupting operations for the other two.
This also runs vault-unseal, providing automatic unsealing for the cluster. Each VM has two of the three keys needed to unseal, so two of the three must be up for automatic unsealing to work.
text/gemini;lang=en-USThis content has been proxied by September (UNKNO).