Guide to deploy a 3-node Raft cluster with TLS everywhere, SoftHSM2 PKCS#11 auto-unseal, per-node vTPM pin sealing, and keepalived VIP for leader failover.




Node Reference





Role
IP




Node 1 (bootstrap leader)
192.168.1.10


Node 2 (follower)
192.168.1.11


Node 3 (follower)
192.168.1.12


VIP (floats to...