# Vault Setup

Ask: **"Would you like to set up your environment variables in Vault now? (yes/skip)"**

- **Skip** → continue to next step.
- **Yes** → execute parts A → B → C sequentially.

---

## Part A — Default Secrets

Output:

> 1. Navigate to https://vault-dev.wistron.com:8200/ui/ and log in.
> 2. Find your project, open the "default" secret path, click 'Edit' (toggle 'View as JSON').
> 3. Copy and paste the following JSON block, then save. When finished, type 'done'.

Provide this JSON with values pulled from `.env.local` and the memorized `CLIENT_SECRET`:

```json
{
  "DATABASE_URL": "[DATABASE_URL from .env.local]",
  "ENTRA_CLIENT_ID": "[VITE_ENTRA_CLIENT_ID from .env.local]",
  "ENTRA_CLIENT_SECRET": "[memorized CLIENT_SECRET]",
  "ENTRA_TENANT_ID": "de0795e0-d7c0-4eeb-b9bb-bc94d8980d3b"
}
```

Wait for "done".

---

## Part B — Harbor Vault Secret

Output:

> Now, go to the root path of your project in Vault and click 'Create secret'.
>
> 1. Name it exactly: `harborvault`
> 2. Toggle 'JSON' mode.
> 3. Go to another existing project in your Vault, copy the JSON values from its `harborvault` secret, and paste them into this new one, then save.
>
> Once finished, type 'done'.

Wait for "done".

---

## Part C — Local Vault Credentials

Ask: **"Please provide your Vault Username and Password so I can add them to your local environment."**

Once received, update `.env.local`:

- `VAULT_USERNAME=<username>`
- `VAULT_PASSWORD=<password>`