vaultpass/example.vaultpass.xml

<?xml version="1.0" encoding="UTF-8" ?>
<vaultpass xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
           xmlns="https://git.square-r00t.net/VaultPass/"
           xsi:schemaLocation="https://git.square-r00t.net/VaultPass/ http://schema.xml.r00t2.io/projects/vaultpass.xsd">
    <server>
        <!-- Optional; defaults to http://localhost:8200/ -->
        <uri>http://localhost:8200/</uri>
        <!-- OPTIONAL! If an unseal shard is provided and the server is sealed, we will attempt
             unsealing with the shard(s) provided. -->
        <unseal>WU9VUiBVTlNFQUwgU0hBUkQgSEVSRQo=</unseal>
    </server>
    <authGpg>~/.vaultcreds.xml.gpg</authGpg>
    <!-- Optional, but probably a *very* good idea if you don't have read/list access to /sys/mounts as you won't
         be able to iterate through available mounts if not. -->
    <!-- Default type if not specified is kv2. -->
    <mounts>
        <mount type="kv1">secret_legacy</mount>
        <mount type="kv2">secret</mount>
        <mount type="cubbyhole">cubbyhole</mount>
    </mounts>
</vaultpass>