<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Vault on Keldo.uk</title>
    <link>https://keldo.uk/tags/vault/</link>
    <description>Recent content in Vault on Keldo.uk</description>
    <generator>Hugo</generator>
    <language>en</language>
    <lastBuildDate>Mon, 24 Mar 2025 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://keldo.uk/tags/vault/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Secrets in Vault</title>
      <link>https://keldo.uk/server/proxmox/vms/docker-hosts/docker/security/secrets-in-vault/</link>
      <pubDate>Mon, 24 Mar 2025 00:00:00 +0000</pubDate>
      <guid>https://keldo.uk/server/proxmox/vms/docker-hosts/docker/security/secrets-in-vault/</guid>
      <description>&lt;p&gt;Since I started storing all my docker compose files in git i have wanted to create a public mirror as a disaster recovery option. To that end i needed a way to remove sensitive envs from the files. To achive this I set the docker env to a shell env like so &lt;code&gt;TEMP: ${TEMP}&lt;/code&gt;
This shell env was set by a script which contained &lt;code&gt;export TEMP=$(vault kv get -field=temp kv/data/docker)&lt;/code&gt;. This vault currently runs as a single node in docker and has to be manually unsealed as needed.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
