HashiCorp Vault

[girish]

@ultraviolet https://github.com/euanmcgregor/vault-cloudron/pull/2 fixes the mlock issue

[fbartels]

@girish ah, yes of course. You need to set the capability on the binary to make use of it (as non root).

[girish]

We can probably remove the supervisor use entirely and just use gosu exec cloudron:cloudron but maybe it's there for a reason

[ultraviolet]

thanks both, I have never had a pull request before!! I am just looking at them now.

[fbartels]

@ultraviolet I managed to get ldap login working. In the end I needed to change the lookup attribute (it weird that you can configure a search filter for groups, but not for users).

Change is in https://github.com/euanmcgregor/vault-cloudron/pull/4

Edit: OIDC login is not yet working btw.

[ultraviolet]

@fbartels awesome stuff on the LDAP.

I have made a few more tweaks with permissions and I have merged your request too. I have also removed the initial init for the vault. It is now done via the GUI which I like better because there are no keys being added to the container plus the user experience is a bit nicer. I have still kept the logic in in case someone wants to automate it.

[ultraviolet]

Sorted, I think I have been running it for most of the day testing some stuff. Not sure if this is app store worthy but it interesting to learn about.
Thanks for your help @fbartels and @girish

[girish]

@ultraviolet I think it will be a great addition to the store. Are you able to add a license file to the package? Like https://git.cloudron.io/cloudron/pixelfed-app/-/blob/master/LICENSE (MIT). You can change copyright to be yours.

Once you do that, I can fix it up and get it published.

@fbartels @ultraviolet How does the LDAP login work ? I don't see ldap-config.sh called from anywhere.

[ultraviolet]

@girish sweet. I will do that no problem. The LDAP has to be done manually as the vault needs to be init'd and unsealed so you would need to execute the script manually.

[girish]

I will add the LDAP notes to the docs then.

[ultraviolet]

@girish License has been added to the repo.

[girish]

I have now published this as unstable! Thanks @ultraviolet . The repo is at https://git.cloudron.io/cloudron/vault-app and you should have push access already. I am writing tests before marking it as stable.