Change vault cert ttl to 8y (#2013)

7 years ago · bfb25fa47b
1 changed files with 2 additions and 2 deletions
--- a/roles/vault/defaults/main.yml
+++ b/roles/vault/defaults/main.yml
@ -44,8 +44,8 @@ vault_bind_address: 0.0.0.0
 vault_port: 8200
 vault_etcd_url: "{{ etcd_access_addresses }}"

-# 10y default lease
-vault_default_lease_ttl: 87600h
+# 8y default lease
+vault_default_lease_ttl: 70080h
 vault_max_lease_ttl: 87600h

 vault_temp_config: