services:
  cloudflared:
    image: cloudflare/cloudflared:latest
    restart: unless-stopped
    command: tunnel run weyma-vault
    env_file: ".env"
  vault:
    image: hashicorp/vault:1.20
    env_file: ".env.vault"
    environment:
      VAULT_ADDR: "https://weyma-vault.infra.dubyatp.xyz:8200"
      VAULT_API_ADDR: "https://api.weyma-vault.infra.dubyatp.xyz:8200"
      VAULT_ADDRESS: "https://weyma-vault.infra.dubyatp.xyz:8200"
      VAULT_UI: true
      VAULT_CACERT: /certs/server.crt
    ports:
      - "8200:8200"
      - "8201:8201"
    restart: always
    volumes:
      - ./logs:/vault/logs/:rw
      - ./data:/vault/data/:rw
      - ./config:/vault/config/:rw
      - ./certs:/certs/:rw
      - ./file:/vault/file/:rw
    cap_add:
      - IPC_LOCK
    entrypoint: vault server -config /vault/config/config.hcl