Hashicorp Consul Config

consul-client-aws.hcl

acl {
  enabled        = true
  down_policy    = "async-cache"
  default_policy = "deny"
}

ca_file                 = "/opt/consul/ca.pem"
data_dir                = "/opt/consul"
datacenter              = "sydney"
verify_outgoing         = true
encrypt_verify_incoming = true
encrypt_verify_outgoing = true
server                  = false
log_level               = "INFO"
ui                      = true
retry_join              = ["provider=aws tag_key=App tag_value=consul"]
auto_encrypt {
  tls = true
}

consul-server-aws.hcl

datacenter = "sydney"
data_dir = "/opt/consul"
client_addr = "0.0.0.0"

ports = {
    https = 8500
    http = -1
}

ui_config{
 enabled = true
}

server = true

encrypt = "${`consul keygen`}"

retry_join = ["provider=aws tag_key=App tag_value=consul"]

acl {
    enabled = true
    enable_token_persistence = true
}

connect {
    enabled = true
    enable_mesh_gateway_wan_federation = true
}

auto_encrypt {
   allow_tls = true
}

ca_file = "/opt/consul/ca.crt"
cert_file = "/opt/consul/tls.crt"
key_file = "/opt/consul/tls.key"
server_name = "${hostname|dns|fqdn}"
verify_incoming = false
verify_outgoing = true
verify_server_hostname = true
verify_incoming_rpc = true