services:
  vault:
    image: hashicorp/vault:latest
    command: server -config=/vault/config/vault.hcl
    ports:
      - "8200:8200"
    volumes:
      - data:/vault/data
    configs:
      - source: vault_hcl
        target: /vault/config/vault.hcl
    environment:
      VAULT_LOCAL_CONFIG: |
        {
          "ui": true
        }
    cap_add:
      - IPC_LOCK
    networks:
      - vault-net
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - node.role == manager

configs:
  vault_hcl:
    external: true
volumes:
  data:
networks:
  vault-net:
    driver: overlay