terraform {
  required_providers {
    docker = {
      source = "kreuzwerker/docker"
    }
  }
}

provider "docker" {
  host = "unix:///var/run/docker.sock"
}

provider "vault" {
  address = "http://localhost:${docker_container.vault.ports[0].external}"
}

# Lazily create a Vault Transit mount
resource "vault_mount" "lazy" {
  path = "lazy-login"
  type = "transit"
}

resource "docker_container" "vault" {
  image      = docker_image.vault.image_id
  name       = random_pet.vault.id
  privileged = true
  env = [
    "VAULT_DEV_ROOT_TOKEN_ID=${var.vault_token}",
    "VAULT_ADDR=http://localhost:8200",
    "VAULT_DEV_LISTEN_ADDRESS=0.0.0.0:8200",
  ]
  ports {
    internal = 8200
  }
}

# Pulls the vault image
resource "docker_image" "vault" {
  name         = "hashicorp/vault:latest"
  keep_locally = true
}

resource "random_pet" "vault" {}