Traefik: Provide option to source shared acme.json from hashicorp vault

[bitsofinfo]

Currently if the configuration is stored in consul KV, the contents of the ACME json cert/keys are stored in the clear in the consul KV store.

Given the sensitivity of the keys in this file, it would be great to have the option of sourcing the acme config certs/keys from something like hashicorp vault instead.

Consul KV's can be secured via ACLs however people use various backup tools that can extract data out of consul and throw it to disk etc. Regardless having an encrypted store for ACME keys would be a great option.

[ewah]

is this feature on the roadmap?

[Nuxij]

This would be so excellent! I run vault anyway and I'd like to get HA + ACME working with it rather than spin up a whole consul stack just for this? Especially if they're stored in the clear like @bitsofinfo says!

[koalalorenzo]

Any update/plan? This is still priority/P3 but it would be a super useful feature to have!