diff --git a/roles/vault/defaults/main.yml b/roles/vault/defaults/main.yml
index f70d67f7d1a408569e0fe033fb7b25f97af8eb3a..acd2ac8fd338c43d5c0ad2242ebb35bdad8e3d16 100644
--- a/roles/vault/defaults/main.yml
+++ b/roles/vault/defaults/main.yml
@@ -44,7 +44,8 @@ vault_bind_address: 0.0.0.0
 vault_port: 8200
 vault_etcd_url: "{{ etcd_access_addresses }}"
 
-vault_default_lease_ttl: 720h
+# 10y default lease
+vault_default_lease_ttl: 87600h
 vault_max_lease_ttl: 87600h
 
 vault_temp_config: