#!/bin/bash
# Vault environment configuration for bash/zsh

# Vault server address
export VAULT_ADDR="https://hcv.inouter.com"

# Use token from systemd service
export VAULT_TOKEN=$(cat /var/lib/vault/vault-token 2>/dev/null || echo "")

# Skip TLS verification if needed
export VAULT_SKIP_VERIFY=true

# Vault functions
vault-status() {
    echo "Vault Address: $VAULT_ADDR"
    echo "Token Status: $(vault token lookup -format=json 2>/dev/null | jq -r '.data.ttl // "Invalid/Expired"')"
    systemctl is-active vault-agent >/dev/null && echo "Agent Status: Running" || echo "Agent Status: Not Running"
}

vault-refresh-token() {
    export VAULT_TOKEN=$(cat /var/lib/vault/vault-token 2>/dev/null || echo "")
    echo "Token refreshed from agent"
}

alias vs='vault-status'
alias vr='vault-refresh-token'