purpose-security

Fully routed IPv6 on Promox and Docker with WireGuard as IPv4to6 tunnel

This is a nonofficial plugin for HashiCorp Vault that uses a FIDO U2F enabled device as a way to authenticate a human.By requiring something you know, a PIN with something you have, the physical token.

This tool will decrypt your Vault recovery keys when using KMS

Create multiple Vault and Consul clusters working as primary and secondary using docker-compose

Automatic provisioning of IPv6 for Docker containers in a secure maner.

A system to facilitate the creation of multiple Vault clusters

This is a helm chart to install HashiCorp Vault with GCP KMS support

This is a plugin for HashiCorp Vault that implements storing data objects into HSM devices using PKCS#11

Unofficial HashiCorp Vault utility that backups a KV backend and other configuration, encrypting it via the transit secret engine

This utility will decrypt any value from Vault storage provided you have the unseal keys

Runs a HashiCorp Vault cluster on LXD - a Python provisioner, Ansible roles for init, unseal and PKI, and a disaster recovery layout.

Vagrant and Ansible lab that reproduces a Consul and Vault PKI cluster, with Tavern tests for the control groups.

Decrypts Vault storage values with the unseal keys, for Vault data written before version 1.0.

How to setup Vault replication under AKS