fix: move primary_datacenter to region/role

- set syd1 as primary consul datacentre
- add consul.service.consul zone
- add nginx reverse proxy for consul webui
- set dns zones/acls/views/keys to be deep merged from hiera
- update default token
- add consul/consul.service.consul/consul.main.unkin.net to vault cert

hieradata/common.yaml

@@ -39,6 +39,30 @@ lookup_options:
   profiles::base::groups::local:
     merge:
       strategy: deep
+  profiles::dns::resolver::zones:
+    merge:
+      strategy: deep
+  profiles::dns::resolver::acls:
+    merge:
+      strategy: deep
+  profiles::dns::resolver::views:
+    merge:
+      strategy: deep
+  profiles::dns::resolver::keys:
+    merge:
+      strategy: deep
+  profiles::dns::master::zones:
+    merge:
+      strategy: deep
+  profiles::dns::master::acls:
+    merge:
+      strategy: deep
+  profiles::dns::master::views:
+    merge:
+      strategy: deep
+  profiles::dns::master::keys:
+    merge:
+      strategy: deep
 
 facts_path: '/opt/puppetlabs/facter/facts.d'