This is a Docker image based on the Phusion Baseimage image to run a Vault server for serving out secrets.

https://vaultproject.io/

Make sure the you have created SSL certificates prior to running the container, since there's no point in having a secure system if you use self-signed certificates! The container is designed to run with Consul as the backend datastore, so the machine where this container would run should have Consul installed and running prior to this container being started.

You can then run one-off commands to start the server, like:

docker run -p 8200 \
  -v /etc/server.crt:/dev/shm/server.crt:ro \
  -v /etc/server.key:/dev/shm/server.key:ro \
  -v /var/log/vault:/var/log/vault:rw \
  -e VAULT_SERVER=https://vault.example.com \
  -e TOKEN=mysuper-secret-vault-token \
  --cap-add=IPC_LOCK \
  broadinstitute/vault

or, you can use docker-compose with a file such as:

vault:
  image: broadinstitute/vault:0.3.1
  ports:
    - "8200:8200"
  volumes:
    - /etc/server.crt:/dev/shm/server.crt:ro
    - /etc/server.key:/dev/shm/server.key:ro
    - /var/log/vault:/var/log/vault:rw
  environment:
    VAULT_SERVER: https://vault.example.com
    TOKEN: mysuper-secret-vault-token
  cap_add:
    - IPC_LOCK