machines/nix/systems/aarch64-linux/security.kaareskovgaard.net/post/openbao/approle.nix

{
  khscodes.infrastructure.vault-server-approle.path = "\${ vault_auth_backend.approle.path }";
  khscodes.infrastructure.provisioning.post.modules = [
    {
      resource.vault_auth_backend.approle = {
        type = "approle";
      };
    }
  ];
}