Added server options for nomad and consul

config/consul.d/client.json

@@ -1,7 +1,4 @@
 {
-  "datacenter": "samfelag",
-  "data_dir": "/opt/consul",
-
   "tls": {
     "defaults": {
       "verify_incoming": false,
@@ -14,28 +11,5 @@
   },
   "auto_encrypt": {
       "tls": true
-  },
-
-  "bind_addr": "{{ GetInterfaceIP \"tailscale0\" }}",
-  "advertise_addr": "{{ GetInterfaceIP \"tailscale0\" }}",
-  "client_addr": "0.0.0.0",
-  "retry_join": ["100.80.195.56", "100.107.148.47"],
-
-  "ports": {
-    "grpc_tls": 8502
-  },
-
-  "acl": {
-    "enabled": true,
-    "default_policy": "allow",
-    "enable_token_persistence": true
-  },
-
-  "connect": {
-    "enabled": true
-  },
-
-  "performance": {
-    "raft_multiplier": 1
   }
 }

config/consul.d/common.json

@@ -0,0 +1,26 @@
+{
+  "datacenter": "samfelag",
+  "data_dir": "/opt/consul",
+
+  "bind_addr": "{{ GetInterfaceIP \"tailscale0\" }}",
+  "advertise_addr": "{{ GetInterfaceIP \"tailscale0\" }}",
+  "client_addr": "{{ GetInterfaceIP \"tailscale0\" }}",
+
+  "ports": {
+    "grpc_tls": 8502
+  },
+
+  "acl": {
+    "enabled": true,
+    "default_policy": "allow",
+    "enable_token_persistence": true
+  },
+
+  "connect": {
+    "enabled": true
+  },
+
+  "performance": {
+    "raft_multiplier": 1
+  }
+}

config/consul.d/server-list.json

@@ -0,0 +1,5 @@
+{
+  "retry_join": [
+      "100.80.195.56"
+  ]
+}

config/consul.d/server.json

@@ -0,0 +1,22 @@
+{
+  "server": true,
+  "bootstrap_expect": 1,
+  "ui_config": {
+    "enabled": true
+  },
+  "tls": {
+    "defaults": {
+      "verify_incoming": true,
+      "verify_outgoing": true,
+      "ca_file": "/etc/consul.d/certs/consul-agent-ca.pem",
+      "cert_file": "/etc/consul.d/certs/samfelag-server-consul-0.pem",
+      "key_file": "/etc/consul.d/certs/samfelag-server-consul-0-key.pem"
+    },
+    "internal_rpc": {
+      "verify_server_hostname": true
+    }
+  },
+  "auto_encrypt": {
+      "allow_tls": true
+  }
+}