# vault-test — HashiCorp Vault DEV server (in-memory; wipes on restart).
# TEST ONLY. Loopback bind. Root token is the well-known dev default
# ("root") — this is not a credential, by design. PKI experiments for
# #697 (SSH certs, k8s CA) happen against THIS instance first.
services:
  vault:
    image: hashicorp/vault:2.0.4
    container_name: ukrrs-pfv-vault-test
    ports:
      - "127.0.0.1:8201:8200"
    environment:
      VAULT_DEV_ROOT_TOKEN_ID: "root"
      VAULT_DEV_LISTEN_ADDRESS: "0.0.0.0:8200"
    cap_add:
      - IPC_LOCK
    restart: unless-stopped