disable_mlock = true


controller {
  
  name = "demo-controller-1"
  description = "A controller for a demo!"
  database {
      url = "postgresql://postgres:password123@<postgres IP>:5432/boundary?sslmode=disable"
      max_open_connections = 5
  }
	public_cluster_addr = "<boundary controller IP>"
	license = "file:///home/boundary/boundary.hclic"
}

listener "tcp" {
  address = "<boundary Controller VM IP>"
  purpose = "api"
  tls_disable = true

}

listener "tcp" {
  address = "<boundary Controller VM IP>"
  purpose = "cluster"
  tls_disable = true
}

kms "aead" {
  purpose = "root"
  aead_type = "aes-gcm"
  key = "sP1fnF5Xz85RrXyELHFeZg9Ad2qt4Z4bgNHVGtD6ung="
  key_id = "global_root"
}

kms "aead" {
  purpose = "worker-auth"
  aead_type = "aes-gcm"
  key = "8fZBjCUfN0TzjEGLQldGY4+iE9AkOvCfjh7+p0GtRBQ="
  key_id = "global_worker-auth"
}


kms "aead" {
  purpose = "recovery"
  aead_type = "aes-gcm"
  key = "8fZBjCUfN0TzjEGLQldGY4+iE9AkOvCfjh7+p0GtRBQ="
  key_id = "global_recovery"
}