---
profiles::consul::server::members_lookup: true
profiles::consul::server::data_dir: /data/consul
profiles::consul::server::addresses:
  dns: "%{::networking.ip}"
  http: "%{::networking.ip}"
  https: "%{::networking.ip}"
  grpc: "%{::networking.ip}"
  grpc_tls: "%{::networking.ip}"
profiles::consul::server::ports:
  dns: 8600
  http: 8500
  https: -1
profiles::consul::server::acl:
  enabled: true
  default_policy: 'deny'
  down_policy: 'extend-cache'
  tokens:
    initial_management: "%{alias('profiles::consul::server::acl_tokens_initial_management')}"
    default: "%{alias('profiles::consul::server::acl_tokens_default')}"

# additional altnames
profiles::pki::vault::alt_names:
  - consul.main.unkin.net
  - consul.service.consul
  - consul