# Configuration for the s6-rc oneshot clevis-unlock (package clevis-s6).
#
# With no settings at all the unit opens every /etc/crypttab entry that carries
# a Clevis binding and is not open yet. That is usually what you want.

# Restrict the unit to these mapper names (crypttab's first column). Empty means
# "every bound device".
#CLEVIS_UNLOCK_NAMES="vault0"

# The network and the Tang servers are not necessarily there the moment this
# runs, so each device is retried.
#CLEVIS_UNLOCK_TRIES=20
#CLEVIS_UNLOCK_DELAY=3

# yes: a device that stays closed makes the unit fail, and everything that
# depends on it stays down. That is the safe default -- a host that comes up
# with its storage missing quietly is the worse outcome. Set to "no" on a
# machine where the volume is optional.
#CLEVIS_UNLOCK_REQUIRED=yes
