vault.cfg

#  vim:ts=4:sts=4:sw=4:et
#
#  Author: Hari Sekhon
#  Date: 2018-03-14 18:46:44 +0000 (Wed, 14 Mar 2018)
#
#  https://github.com/harisekhon/haproxy-configs
#
#  License: see accompanying Hari Sekhon LICENSE file
#
#  If you're using my code you're welcome to connect with me on LinkedIn and optionally send me feedback to help steer this or other code I publish
#
#  https://www.linkedin.com/in/harisekhon
#

# ============================================================================ #
#                H A P r o x y  -  H a s h i c o r p   V a u l t
# ============================================================================ #

frontend vault
    description "Vault"
    bind *:8200
    default_backend vault

backend vault
    description "Vault"
    balance first
    acl internal_networks src 192.168.0.0/16 172.16.0.0/12 10.0.0.0/8 127.0.0.1
    http-request deny if ! internal_networks
    option httpchk GET /v1/sys/health
    http-check expect string '"standby":false'
    server vault vault:8200 check
    server docker docker:8200 check backup
    server 192.168.99.100 192.168.99.100:8200 check backup