Vault
Unsealing
Vault stores all the secrets in memory. It uses the mlock capability of the kernel to prevent swapping. When the app restarts or the server restarts, it must be unsealed using the keys that were generated during setup. This is by Vault design.
Setup
On first visit, you can generate the keys for the vault by specifying the number of shares and the threshold. The idea is that a master key is generated and split into the number of shares. To unlock the vault, you must provide at least threshold ...
How to order Vault?
1. Login at: https://cloud.danian.co 2. Manage Apps - Add an App 3. Select: Vault 4. Select vCPU / RAM If you don't know how much you will need to use, just leave the default. 5. Select Disk Storage Size If you don't know how much you will need to ...