fix: move primary_datacenter to region/role

- set syd1 as primary consul datacentre
- add consul.service.consul zone
- add nginx reverse proxy for consul webui
- set dns zones/acls/views/keys to be deep merged from hiera
- update default token
- add consul/consul.service.consul/consul.main.unkin.net to vault cert

site/profiles/manifests/consul/server.pp

@@ -102,10 +102,12 @@ class profiles::consul::server (
       }
     }
   }
-
-  # consul before dnsmasq
+  # consul before extra services
   if defined(Class['consul']) {
 
+    # setup nginx
+    include profiles::consul::nginx
+
     # get the dns port from the $ports hash, otherwise use the default
     $dns_port = pick($ports['dns'], 8600)