itamae/cookbooks/consul/templates/etc/consul.d/consul-server.hcl.erb

datacenter = "dc1"
data_dir   = "/opt/consul"

encrypt                = "<%= @encrypt %>"
verify_incoming        = true
verify_outgoing        = true
verify_server_hostname = true

ca_file   = "/etc/consul.d/certs/consul-agent-ca.pem"

bind_addr = "<%= @ipaddr %>"
client_addr    = "0.0.0.0"
advertise_addr = "<%= @ipaddr %>"

performance {
  raft_multiplier = 1
}

disable_remote_exec = false
disable_update_check = false
enable_local_script_checks = true

log_file             = "/var/log/consul/"
log_rotate_max_files = -1
log_level            = "INFO"
log_json             = false
log_rotate_bytes     = 1000000

enable_central_service_config = true
ports {
  grpc_tls = 8502
}
connect {
  enabled = true
}

telemetry {
  prometheus_retention_time = "24h"
  disable_hostname          = true
}

retry_join = [<%= @manager_hosts %>]
rejoin_after_leave = true