itamae/cookbooks/consul/templates/etc/consul.d/consul-agent.hcl.erb

datacenter = "dc1"
data_dir   = "/opt/consul"

encrypt                = "<%= @encrypt %>"
verify_incoming        = true
verify_outgoing        = true
verify_server_hostname = true

ca_file   = "/etc/consul.d/certs/consul-agent-ca.pem"

bind_addr      = "0.0.0.0"
client_addr    = "0.0.0.0"
advertise_addr = "<%= @ipaddr %>"

performance {
  raft_multiplier = 1
}

disable_update_check       = false
enable_local_script_checks = true

log_file             = "/var/log/consul/"
log_rotate_max_files = -1
log_level            = "INFO"
log_json             = false
log_rotate_bytes     = 1000000

enable_central_service_config = true
ports {
  grpc = 8502
}
connect {
  enabled = true
}

telemetry {
  prometheus_retention_time = "24h"
  disable_hostname          = true
}

auto_config {
  enabled = true
  intro_token_file = "/etc/consul.d/tokens/jwt"
  server_addresses = [ <%= @manager_hosts %> ]
}

acl {
  tokens {
    default = "<%= @token %>"
  }
}