2023-05-01 18:21:06 +00:00
|
|
|
---
|
|
|
|
|
renew_nomad_certificates_config_dir: /etc/consul-template.d/nomad
|
|
|
|
|
renew_nomad_certificates_nomad_user: nomad
|
|
|
|
|
renew_nomad_certificates_nomad_group: nomad
|
|
|
|
|
renew_nomad_certificates_vault_addr: "https://vault.example.com"
|
|
|
|
|
renew_nomad_certificates_vault_token: mysupersecretnomadtokenthatyoushouldchange
|
|
|
|
|
renew_nomad_certificates_vault_token_unwrap: false
|
|
|
|
|
renew_nomad_certificates_vault_token_renew: true
|
|
|
|
|
renew_nomad_certificates_ca_dest: /opt/nomad/tls/ca.pem
|
|
|
|
|
renew_nomad_certificates_cert_dest: /opt/nomad/tls/cert.pem
|
|
|
|
|
renew_nomad_certificates_key_dest: /opt/nomad/tls/key.pem
|
|
|
|
|
renew_nomad_certificates_info:
|
2023-07-03 17:46:36 +00:00
|
|
|
issuer_path: pki/issue/your-ca-int
|
2023-05-01 18:21:06 +00:00
|
|
|
common_name: nomad01.example.com
|
|
|
|
|
ttl: 90d
|
|
|
|
|
is_server: true
|
2023-05-01 21:02:35 +00:00
|
|
|
is_client: true
|
2023-05-01 18:21:06 +00:00
|
|
|
include_nomad_service: true
|
|
|
|
|
renew_nomad_certificates_nomad_dc_name: dc1.nomad
|
|
|
|
|
renew_nomad_certificates_nomad_service_name: nomad.service.nomad
|
|
|
|
|
renew_nomad_certificates_start_service: false
|
