refactor

vault-token/README.md

@@ -44,17 +44,16 @@ curl -H "X-Vault-Token: ${VAULT_TOKEN}" -X GET "${VAULT_ADDR}/v1/coder/data/my-s
 
 To configure the Vault module, you must create a Vault token with the the required permissions and configure the module with the token and Vault address.
 
-1. Create a vault policy `read-coder-secrets.hcl` with read access to the secret mount you need your developers to access.
+1. Create a vault policy with read access to the secret mount you need your developers to access.
-   ```hcl
+   ```shell
+   vault policy write read-coder-secrets - <<EOF
     path "coder/data/*" {
       capabilities = ["read"]
     }
     path "coder/metadata/*" {
       capabilities = ["read"]
     }
-   ```
+    EOF
-   ```shell
-   vault policy write read-coder-secrets ead-coder-secrets.hcl
    ```
 2. Create a token using this policy.
    ```shell