infrastructure/ansible/roles/consul/templates/consul.json.j2

{
  "datacenter": "deuxfleurs",
  "data_dir": "/var/lib/consul",
  "bind_addr": "0.0.0.0",
  "advertise_addr": "{{ vpn_ip }}",
  "addresses": {
    "dns": "0.0.0.0",
    "http": "0.0.0.0"
  },
  "retry_join": [
   {% for selected_host in groups['cluster_nodes']|difference([inventory_hostname]) %}{# @FIXME: Reject doesn't work #}
     "{{ hostvars[selected_host]['vpn_ip'] }}" {{ "," if not loop.last else "" }}
   {% endfor %}
  ],
  "bootstrap_expect": {{ groups['cluster_nodes']|length }},
  "server": true,
  "ui": true,
  "ports": {
     "dns": 53
  },
  "recursors": [
    "{{ dns_server }}"
  ],
  "encrypt": "{{ consul_gossip_encrypt }}",
  "domain": "2.cluster.deuxfleurs.fr",
  "performance": {
    "raft_multiplier": 10,
    "rpc_hold_timeout": "30s",
    "leave_drain_time": "30s"
  }
}