aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlex Auvolat <alex@adnab.me>2022-08-24 16:58:09 +0200
committerAlex Auvolat <alex@adnab.me>2022-08-24 16:58:50 +0200
commita0c8280c02855fa2731d3f89df1dec0ae9627990 (patch)
treec88265369066c5f1683bca4bef767561e9c96ef5
parentfe1f261738d9ef4cf4ee05b67820b201821bf31c (diff)
downloadnixcfg-a0c8280c02855fa2731d3f89df1dec0ae9627990.tar.gz
nixcfg-a0c8280c02855fa2731d3f89df1dec0ae9627990.zip
Fix access to consul for non-server nodes
-rwxr-xr-xgen_pki2
-rw-r--r--nix/deuxfleurs.nix2
2 files changed, 2 insertions, 2 deletions
diff --git a/gen_pki b/gen_pki
index c06865b..ad867fb 100755
--- a/gen_pki
+++ b/gen_pki
@@ -59,7 +59,7 @@ subjectAltName = @alt_names
[alt_names]
DNS.1 = server.$CLUSTER.$APP
DNS.2 = client.$CLUSTER.$APP
-DNS.3 = $APP.service.$CLUSTER.$APP
+DNS.3 = $APP.service.$CLUSTER.consul
DNS.4 = localhost
DNS.5 = 127.0.0.1
EOF
diff --git a/nix/deuxfleurs.nix b/nix/deuxfleurs.nix
index 0b5169f..b6d3417 100644
--- a/nix/deuxfleurs.nix
+++ b/nix/deuxfleurs.nix
@@ -251,7 +251,7 @@ in
serf = "${cfg.cluster_ip}";
};
consul = {
- address = "localhost:8501";
+ address = "consul.service.prod.consul:8501";
ca_file = "/var/lib/nomad/pki/consul2022.crt";
cert_file = "/var/lib/nomad/pki/consul2022-client.crt";
key_file = "/var/lib/nomad/pki/consul2022-client.key";