fix vault config.hcl.j2

files/vault/Alpine/openrc

@@ -1,9 +1,10 @@
 #!/sbin/openrc-run
 
-capabilities="cap_ipd_lock=+ep"
 command="/usr/local/bin/vault"
-command_group="vault"
-command_user="vault"
+command_user="vault:vault"
+command_background=true
+capabilities="^cap_chown,^cap_ipc_lock"
+pidfile="/var/run/${RC_SVCNAME}.pid"
 
 # args
 config_args="-config=/etc/$RC_SVCNAME/config.hcl"
@@ -20,31 +21,39 @@ depend() {
 
 start_pre() {
   checkpath --directory \
-    --owner $command_user:$command_group \
+    --owner $command_user \
     --mode 0755 \
-    /run/$RC_SVCNAME /var/log/$RC_SVCNAME
-}
-
-start() {
-  ebegin "Starting $RC_SVCNAME"
-  start-stop-daemon --start \
-    --exec $command \
-    --capabilities $capabilities \
-    --make-pidfile \
-    --pidfile /var/run/$RC_SVCNAME.pid \
-    --user $command_user:$command_group \
-    -- \
-    $command_args
-
-  eend $?
-}
-
-stop() {
-  ebegin "Stopping $RC_SVCNAME"
-  start-stop-daemon --stop \
-    --exec $command \
-    --pidfile /var/run/$RC_SVCNAME.pid
-
-  eend $?
+    /var/log/$RC_SVCNAME
 }
+#
+# start() {
+#   ebegin "Starting $RC_SVCNAME"
+#   start-stop-daemon --start \
+#     --exec $command \
+#     --capabilities $capabilities \
+#     --make-pidfile \
+#     --pidfile /var/run/$RC_SVCNAME.pid \
+#     --user $command_user:$command_group \
+#
+#     -- \
+#     $command_args
+#
+#   eend $?
+# }
+#
+# stop() {
+#   ebegin "Stopping $RC_SVCNAME"
+#   start-stop-daemon --stop \
+#     --exec $command \
+#     --pidfile /var/run/$RC_SVCNAME.pid
+#
+#   eend $?
+# }
+#
+# restart() {
+#   ebegin "Restarting $RC_SVCNAME"
+#   stop()
+#   start()
+#   eend $?
+# }
 # vim: set filetype=sh :