server:
  dataStorage:
    enabled: true
    size: 1Gi
    storageClass: nfs-client

  standalone:
    enabled: true
    config: |
      ui = true

      storage "file" {
        path = "/vault/data"
      }

      listener "tcp" {
        address     = "0.0.0.0:8200"
        tls_disable = 1
      }

      disable_mlock = true

  extraEnvironmentVars:
    VAULT_ADDR: http://127.0.0.1:8200

ui:
  enabled: true

ingress:
  enabled: true
  ingressClassName: traefik
  annotations:
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.tls: "true"
  hosts:
    - host: vault.dvirlabs.com
      paths:
        - path: /
          pathType: Prefix
  tls:
    - hosts:
        - vault.dvirlabs.com

# ✅ Disable CSI fully
csi:
  enabled: false
  agent:
    enabled: false