gistfile1.txt

## Agents config
datacenter = "aws-us-west-2"
data_dir = "/opt/consul"
encrypt = "xxxx"
verify_incoming = true
verify_outgoing = true
verify_server_hostname = true
node_name = "i-xxxx"

## TLS config
ca_file = "/etc/consul.d/consul-agent-ca.pem"
cert_file = "/etc/consul.d/aws-us-west-1-server-consul-0.pem"
key_file = "/etc/consul.d/aws-us-west-1-server-consul-0-key.pem"

auto_encrypt {
  allow_tls = true
}

## Datacenter auto-join
retry_join =  ["172.30.xx", "172.30.xx", "172.30.xx"]

## ACL
acl {
  enabled = true
  default_policy = "allow"
  enable_token_persistence = true
}

## Server config
server = true
bootstrap_expect = 4

## Bind/advertise address
bind_addr = "172.30.xx"

## Client address binding
client_addr = "0.0.0.0"

## Service mesh
connect {
  enabled = true
}

addresses {
  grpc = "127.0.0.1"
}

ports {
  grpc  = 8502
}

## UI config
ui_config {
  enabled = true
}