{ config, pkgs, ... }:
{
  services.openbao = {
    enable = true;
    settings = {
      ui = true;

      listener.default = {
        type = "tcp";
        tls_disable = true;
      };

      cluster_addr = "http://127.0.0.1:8201";
      api_addr = "http://127.0.0.1:8200";

      storage.raft.path = "/var/lib/openbao";
    };
  };
}