services:
  vault:
    image: hashicorp/vault:latest
    command: server -config=/vault/config/vault.hcl
    volumes:
      - data:/vault/data
    configs:
      - source: vault_hcl
        target: /vault/config/vault.hcl
    environment:
      VAULT_LOCAL_CONFIG: |
        {
          "ui": true
        }
      VAULT_API_ADDR: "http://192.168.77.101:8200"
    cap_add:
      - IPC_LOCK
    networks:
      - vault-net
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - node.role == manager

# configs:
#   vault_hcl:
#     external: true
volumes:
  data:
networks:
  vault-net:
    driver: overlay