diff --git a/website/source/docs/commands/environment.html.md b/website/source/docs/commands/environment.html.md new file mode 100644 index 0000000000..f93c671603 --- /dev/null +++ b/website/source/docs/commands/environment.html.md @@ -0,0 +1,50 @@ +--- +layout: "docs" +page_title: "Environment" +sidebar_current: "docs-commands-environment" +description: |- + Vault's behavior can be modified by certain environment variables. +--- + +# Environment variables + +The Vault CLI will read the following environment variables to set +behavioral defaults. These can be overridden in all cases using +command-line arguments; see the command-line help for details. + +The following table describes them: + +
| Variable name | +Value | +
|---|---|
| VAULT_TOKEN | +The Vault authentication token. If not specified, the token located in $HOME/.vault-token will be used if it exists. | +
| VAULT_ADDR | +The address of the Vault server. | +
| VAULT_CACERT | +Path to a PEM-encoded CA cert file to use to verify the Vault server SSL certificate. | +
| VAULT_CAPATH | +Path to a directory of PEM-encoded CA cert files to verify the Vault server SSL certificate. If VAULT_CACERT is specified, its value will take precedence. | +
| VAULT_CLIENT_CERT | +Path to a PEM-encoded client certificate for TLS authentication to the Vault server. | +
| VAULT_CLIENT_KEY | +Path to an unencrypted PEM-encoded private key matching the client certificate. | +
| VAULT_SKIP_VERIFY | +If set, do not verify Vault's presented certificate before communicating with it. Setting this variable is not recommended except during testing. | +