Vault Demo Application

Source code used in demo's for DotnetFlix episode 88 & episode 89. In these episodes I showcase how HashiCorp Vault can be implemented in your .NET applications to manage all kind of secrets.

Multiple topics's are being discussed:

• Dynamic credentials for RabbitMQ using the RabbitMQ Secrets Engine
• Authentication for application users with Userpass Auth Method
• Integrate 2FA with the TOTP Secrets Engine
• Short-lived TLS-certificates with the PKI Secrets Engine
• Application authentication & bootstrapping using the AppRole Auth Method & Response Wrapping

Commands, configuration & docker-compose files used in the demo can be found in ./00-Setup folder.

Application arguments & settings

Variables can be found in ./01-ApplicationHost/Properties/launchSettings.json

Command line arguments

1. --Tls - configures dynamic TLS endpoint, leave out to run without TLS

Environment variables

1. VaultSettings__BootstrapToken - used for application bootstrapping. May leave empty.
2. VaultSettings__TotpEnabled - true/false to enable/disable 2FA functions
3. VaultSettings__AppRoleId - App role of the application
4. VaultSettings__AppRoleSecret - fill when not using application bootstrapping