robosharp/vault-automator

By robosharp

Updated 9 months ago

Automates initialization and unsealing of HashiCorp Vault for homelab and self-hosted setups.

Image
Security
Developer tools
0

4.1K

robosharp/vault-automator repository overview

Vault Automator simplifies HashiCorp Vault setup for homelab and self-hosted environments. This container automatically initializes Vault, unseals it when needed, and securely stores unseal keys and the root token in a local file. Just deploy with Docker Compose—no manual key handling required. Supports both amd64 and arm64 platforms. Ideal for quick, hands-off Vault deployments.

See: https://github.com/RoboSharp/Vault-Automator

Docker Compose Example:

services:
  vault:
    image: hashicorp/vault:latest
    container_name: vault
    restart: unless-stopped
    ports:
      - 8200:8200
    volumes:
      - ./data:/vault/data
    command: server
    environment:
      VAULT_ADDR: "http://0.0.0.0:8200"
      VAULT_LOCAL_CONFIG: |
        ui = true
        cluster_name      = "Test Vault Cluster"
        api_addr          = "http://vault:8200"
        log_level         = "info"
        disable_mlock     = true
        default_lease_ttl = "168h"
        max_lease_ttl     = "8760h"
        cluster_addr      = "http://vault:8201"
        storage "raft" {
            path    = "/vault/data"
            node_id = "node-1"
        }
        listener "tcp" {
            address     = "0.0.0.0:8200"
            tls_disable = "true"
        }
    cap_add:
      - IPC_LOCK
    networks:
      - vault-network

  vault-automator:
    image: robosharp/vault-automator:latest
    container_name: vault-automator
    restart: unless-stopped
    volumes:
      - ./unseal:/unseal
    depends_on:
      - vault
    environment:
      VAULT_ADDR: "http://vault:8200"
    networks:
      - vault-network

networks:
  vault-network:
    driver: bridge

Tag summary

Content type

Image

Digest

sha256:e05840f8d

Size

179.3 MB

Last updated

9 months ago

docker pull robosharp/vault-automator