Put HashiCorp Vault on Hosts in India in 5 Minutes

HashiCorp Vault is the open-source standard for secret storage. Your apps ask it for secrets. They use one application programming interface (API). It keeps API keys and database logins. It keeps certificates and other secrets.

Before you start.

You need three things.

• A plan that runs apps. Vault needs at least the Apps-t5 plan. That plan has 2 virtual CPUs (vCPU). It has 4 GB of RAM (random access memory). It has 80 GB of storage. See live prices on /pricing.
• Free Secure Sockets Layer (SSL). We add it once your set up is done.
• A clear plan for your secrets. Vault sends JSON (JavaScript Object Notation) on a safe link. Any language that can make a web call can talk to it.

Step 1 - Open the apps list.

Click Apps on our home page. Then pick the Vault card. The set up screen opens.

Step 2 - Name your Vault.

Pick a slug. Your Vault API address is https://your-slug.webhost24.in. You can use your own domain. Type it in the Custom domain field. We will show you the domain name system (DNS) records to add.

Step 3 - Pick a plan.

The Apps-t5 plan is the least one you can use. It has 2 vCPU. It has 4 GB RAM. It has 80 GB of storage. That is enough for one node. We set it on the Vault set up screen for you. We run one Raft node. That is as safe as a big group of nodes. It costs less.

Step 4 - Wait for the deploy.

We set up a container. It has the latest Vault and Raft storage. The SSL covers the Vault screen and API. This takes three to five minutes. You can watch it live in your dashboard.

Step 5 - Set up Vault.

Once it turns Live, open the Vault URL. The first page shows the set up screen. You need 3 of 5 key shares to unseal Vault after each restart. We keep them in your WebHost24 dashboard. So you do not have to do this by hand. Click Initialise, save the key shares, and you are in.

What you get out of the box.

• Free Let's Encrypt SSL. We renew it for you.
• Daily encrypted copies of the Vault data. We keep each one for 7 days.
• One Raft node that keeps data safe.
• A data centre in Palitana, Gujarat. Nothing leaves India.
• Prices in rupees. You pay month to month.

What to do next.

• Turn on the secrets engine you need. The key/value (KV) v2 is the default. It works for most cases.
• Write policies. Give each app just the secrets it needs.
• Point your apps at the Vault API. Set VAULT_ADDR in the app environment.
• Set up dynamic database logins. Do this if you run PostgreSQL or MySQL on the same account.

When to upgrade.

The Apps-t5 plan handles dozens of apps. They read from it. The next plan up doubles your RAM and storage. You get more room for the audit log. You get more secrets engines. You get tools for public key infrastructure (PKI).

That is all it takes. You go from sign up to a live Vault cluster. It is hosted in India. You get free SSL. You get daily copies. If you get stuck, message us on WhatsApp.