From fa0c3203f11065a1744b2d0ba49633a287076fb9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Arma=C3=ABl=20Gu=C3=A9neau?= <armael.gueneau@ens-lyon.org>
Date: Sat, 18 Jan 2025 17:01:10 +0100
Subject: [PATCH] consul config: update deprecated options

---
 nix/deuxfleurs.nix | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/nix/deuxfleurs.nix b/nix/deuxfleurs.nix
index f9fd068..45a64c0 100644
--- a/nix/deuxfleurs.nix
+++ b/nix/deuxfleurs.nix
@@ -328,12 +328,14 @@ in
         rpc_hold_timeout = "70s";
       };
 
-      ca_file = "/var/lib/consul/pki/consul-ca.crt";
-      cert_file = "/var/lib/consul/pki/consul.crt";
-      key_file = "/var/lib/consul/pki/consul.key";
-      verify_incoming = true;
-      verify_outgoing = true;
-      verify_server_hostname = true;
+      tls.defaults = {
+        ca_file = "/var/lib/consul/pki/consul-ca.crt";
+        cert_file = "/var/lib/consul/pki/consul.crt";
+        key_file = "/var/lib/consul/pki/consul.key";
+        verify_incoming = true;
+        verify_outgoing = true;
+      };
+      tls.internal_rpc.verify_server_hostname = true;
     };
 
     services.nomad.enable = true;