bgwaf/ansible/roles/consul/templates/config.json

{
  "log_level": "INFO",
  "domain": "{{ consul_domain }}",
  "datacenter": "{{ consul_datacenter | mandatory }}",
  "key_file": "{{ consul_key_file }}",
  "cert_file": "{{ consul_cert_file }}",
  "ca_file": "{{ consul_ca_file }}",
  "verify_incoming": true,
  "verify_outgoing": true,
  "verify_server_hostname": true,
  "encrypt": "{{ consul_secret_key }}",
  "data_dir": "/opt/consul",
{% if consul_server %}
  "node_name": "{{ ansible_hostname }}",
  "server": true,
  "ui": true,
  "leave_on_terminate": true,
  "client_addr": "{{ consul_client_addr }}",
  "bind_addr": "{{ consul_bind_addr }}",
  "advertise_addr": "{{ consul_advertise_addr }}",
  "bootstrap_expect": {{ consul_servers | length }},
  "enable_syslog": true,
  "performance": {
    "raft_multiplier": 1
  },
  "acl": {
    "enabled": true,
{% if not consul_acl_bootstraped %}
    "default_policy": "allow",
{% else %}
    "default_policy": "deny",
    "tokens": {
      "agent": "FIXME"
    },
{% endif %}
    "down_policy": "extend-cache"
  },
{% endif %}
  "retry_join": ["{{ consul_servers | join('", "') }}"]
}