diff --git a/acls/nomad_vault_db.tf b/acls/nomad_vault_db.tf
new file mode 100644
index 0000000..9d1107a
--- /dev/null
+++ b/acls/nomad_vault_db.tf
@@ -0,0 +1,17 @@
+# resource "vault_mount" "db" {
+#   path = "database"
+#   type = "database"
+# }
+#
+# resource "vault_database_secret_backend_connection" "mysql" {
+#   backend       = vault_mount.db.path
+#   name          = "mysql"
+#   allowed_roles = ["accessdb"]
+#
+#   mysql {
+#     # How to give access here?
+#     connection_url = "{{username}}:{{password}}@tcp(localhost:3306)"
+#     username = ""
+#     password = ""
+#   }
+# }