Initial commit

templates/config/vault/barong.hcl.erb

@@ -0,0 +1,32 @@
+# Access system health status
+path "sys/health" {
+  capabilities = ["read", "list"]
+}
+# Manage the transit secrets engine
+path "transit/keys/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = ["create", "read", "list"]
+}
+# Encrypt API keys
+path "transit/encrypt/<%= @config['app']['name'].downcase %>_apikeys_*" {
+  capabilities = ["create", "read", "update"]
+}
+# Decrypt API keys
+path "transit/decrypt/<%= @config['app']['name'].downcase %>_apikeys_*" {
+  capabilities = ["create", "read", "update"]
+}
+# Renew tokens
+path "auth/token/renew" {
+  capabilities = ["update"]
+}
+# Lookup tokens
+path "auth/token/lookup" {
+  capabilities = ["update"]
+}
+# Manage otp keys
+path "totp/keys/*" {
+  capabilities = ["create", "read", "update", "delete"]
+}
+# Verify an otp code
+path "totp/code/*" {
+  capabilities = ["read","update"]
+}

templates/config/vault/finex_engine.hcl.erb

@@ -0,0 +1,23 @@
+path "transit/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = [ "read" ]
+}
+# Decrypt secrets
+path "transit/decrypt/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = [ "create", "update" ]
+}
+# Use key for signing
+path "transit/sign/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = ["update"]
+}
+# Create transit key
+path "transit/keys/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = ["create"]
+}
+# Renew tokens
+path "auth/token/renew" {
+  capabilities = ["update"]
+}
+# Lookup tokens
+path "auth/token/lookup" {
+  capabilities = ["update"]
+}

templates/config/vault/peatio_crypto.hcl.erb

@@ -0,0 +1,24 @@
+# Manage the transit secrets engine
+path "transit/keys/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = ["create", "read", "list"]
+}
+# Encrypt Payment Addresses secrets
+path "transit/encrypt/<%= @config['app']['name'].downcase %>_payment_addresses_*" {
+  capabilities = ["create", "read", "update"]
+}
+# Decrypt Payment Addresses secrets
+path "transit/decrypt/<%= @config['app']['name'].downcase %>_payment_addresses_*" {
+  capabilities = ["create", "read", "update"]
+}
+# Decrypt wallets secrets
+path "transit/decrypt/<%= @config['app']['name'].downcase %>_wallets_*" {
+  capabilities = ["create", "read", "update"]
+}
+# Renew tokens
+path "auth/token/renew" {
+  capabilities = ["update"]
+}
+# Lookup tokens
+path "auth/token/lookup" {
+  capabilities = ["update"]
+}

templates/config/vault/peatio_matching.hcl.erb

@@ -0,0 +1,23 @@
+path "transit/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = [ "read" ]
+}
+# Decrypt secrets
+path "transit/decrypt/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = [ "create", "update" ]
+}
+# Use key for signing
+path "transit/sign/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = ["update"]
+}
+# Create transit key
+path "transit/keys/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = ["create"]
+}
+# Renew tokens
+path "auth/token/renew" {
+  capabilities = ["update"]
+}
+# Lookup tokens
+path "auth/token/lookup" {
+  capabilities = ["update"]
+}

templates/config/vault/peatio_rails.hcl.erb

@@ -0,0 +1,44 @@
+# Manage the transit secrets engine
+path "transit/keys/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = ["create", "read", "list"]
+}
+# Encrypt engines secrets
+path "transit/encrypt/<%= @config['app']['name'].downcase %>_engines_*" {
+  capabilities = ["create", "read", "update"]
+}
+# Encrypt wallets secrets
+path "transit/encrypt/<%= @config['app']['name'].downcase %>_wallets_*" {
+  capabilities = ["create", "read", "update"]
+}
+# Decrypt wallets secrets
+path "transit/decrypt/<%= @config['app']['name'].downcase %>_wallets_*" {
+capabilities = ["create", "read", "update"]
+}
+# Encrypt beneficiaries data
+path "transit/encrypt/<%= @config['app']['name'].downcase %>_beneficiaries_*" {
+  capabilities = [ "create", "read", "update" ]
+}
+# Decrypt beneficiaries data
+path "transit/decrypt/<%= @config['app']['name'].downcase %>_beneficiaries_*" {
+  capabilities = [ "create", "read", "update" ]
+}
+# Decrypt Payment Addresses secrets
+path "transit/decrypt/<%= @config['app']['name'].downcase %>_payment_addresses_*" {
+capabilities = ["create", "read", "update"]
+}
+# Renew tokens
+path "auth/token/renew" {
+  capabilities = ["update"]
+}
+# Lookup tokens
+path "auth/token/lookup" {
+  capabilities = ["update"]
+}
+# Manage otp keys
+path "totp/keys/*" {
+capabilities = ["create", "read", "update", "delete"]
+}
+# Verify an otp code
+path "totp/code/*" {
+capabilities = ["read","update"]
+}

templates/config/vault/peatio_upstream.hcl.erb

@@ -0,0 +1,16 @@
+# Manage the transit secrets engine
+path "transit/keys/<%= @config['app']['name'].downcase %>_*" {
+  capabilities = ["create", "read", "list"]
+}
+# Decrypt Engines secrets
+path "transit/decrypt/<%= @config['app']['name'].downcase %>_engines_*" {
+  capabilities = ["create", "read", "update"]
+}
+# Renew tokens
+path "auth/token/renew" {
+  capabilities = ["update"]
+}
+# Lookup tokens
+path "auth/token/lookup" {
+  capabilities = ["update"]
+}