finish nomad, add consul, sops

This commit is contained in:
2023-11-19 23:54:43 +00:00
parent cfd6335ea1
commit 5ce7ffc29c
3 changed files with 51 additions and 3 deletions

View File

@@ -20,18 +20,22 @@
# myPkg = oldpkgs.consul;
in {
# virtualisation.docker.enable = true;
sops.secrets.consul_encrypt = {};
sops.secrets.consul_encrypt_json = {
sopsFile = "${secretstore}/consul_encrypt.json";
device_json.format = "binary";
};
services.consul = {
# package = myPkg;
enable = true;
webUi = true;
interface.bind = "end0";
extraConfigFiles = [ sops.secrets.consul_encrypt_json.path ]
extraConfig = {
bootstrap = false;
server = true;
bootstrap_expect = 3;
encrypt = config.sops.secrets.consul_encrypt;
performance = {
raft_multiplier = 5;
};