Konfigurasi

Berikut contoh file konfigurasi server Konchi, mengikuti pola umum dari OpenBao/Vault:

# /etc/konchi/config.hcl
listener "tcp" {
  address     = "0.0.0.0:8200"
  tls_disable = 0
  tls_cert_file = "/etc/konchi/tls/tls.crt"
  tls_key_file  = "/etc/konchi/tls/tls.key"
}

storage "raft" {
  path    = "/var/lib/konchi"
  node_id = "node-1"
}

api_addr = "https://konchi.example.com:8200"
cluster_addr = "https://10.0.0.10:8201"
telemetry {
  prometheus_retention_time = "24h"
}

Konfigurasi production sebaiknya menggunakan auto-unseal via HSM/KMS, audit sink, serta mTLS antar node.