News for hackers. Stuff that matters.

A comment on Secret Management with Vault.

Re:Secret Management with Vault by doublerebel on Friday October 28, 2016 @05:42PM (#12821000)
Vault has been excellent, it (and Consul) runs on Solaris/SmartOS and is available through pkgsrc. Vault has been one of the most set-it-and-forget-it pieces of my infrastructure, it "just works" to hold and expire secrets.

I use it to hold all my LetsEncrypt certs, my private keys get stored in Vault and I never have to expose them even to myself. I created the NodeJS package ten-ply-crest [0] (expressjs middleware) to handle this for me [1], using indutny/bud [2] as the TLS terminator with SNI.

[0]: https://github.com/nextorigin/ten-ply-crest

[1]: https://github.com/nextorigin/ten-ply-crest/blob/master/src/...

[2]: https://github.com/indutny/bud

[ Parent | on HN ]
Re:Secret Management with Vault by josegonzalez on Friday October 28, 2016 @06:56PM (#12821470)
Interesting. We're currently mostly using it for application secrets, but I'll definitely be looking at what other secrets we can move to Vault from Blackbox, if only to consolidate on one secret management solution.
[ Parent | on HN ]