register hashicorp package registry

install vault

copy certificates (from vault_tls_cert_content and vault_tls_cert_key_content vars)

enable and start vault systemd unit

Vars

inventory_hostname - server hostname used in api_addr and cluster_addr
vault_tls_cert_content - TLS cert content
vault_tls_key_content - TLS key content
vault_cluster_nodes - list of inventory hostnames building single cluster (retry_join)
vault_storage_path: "/opt/vault/data"
vault_plugin_path: "/etc/vault.d/plugins"
vault_enable_ui: false
vault_owner: "vault"
vault_group: "vault"
vault_tls_cert_file: "/etc/ssl/{{ inventory_hostname }}/vault/vault-fullchain.crt"
vault_tls_key_file: "/etc/ssl/{{ inventory_hostname }}/vault/vault.pem"
vault_plugins: []
hashicorp_gpg_key - GPG key of the HashiCorp repo