depot/cluster/services/consul/agent.nix

{ config, cluster, depot, ... }:

let
  inherit (depot.lib.meta) domain;
  inherit (config.networking) hostName;
  inherit (cluster.config) hostLinks;
  cfg = cluster.config.services.consul;

  hl = hostLinks.${hostName}.consul;
in

{
  links.consulAgent.protocol = "http";

  services.consul = {
    enable = true;
    webUi = true;
    package = depot.packages.consul;
    extraConfig = {
      datacenter = "eu-central";
      domain = "sd-magic.${domain}.";
      recursors = [ "127.0.0.1" cluster.config.links.dnsResolver.ipv4 ];
      server = true;
      node_name = config.networking.hostName;
      bind_addr = hl.ipv4;
      ports.serf_lan = hl.port;
      retry_join = map (hostName: hostLinks.${hostName}.consul.tuple) (cfg.otherNodes.agent hostName);
      bootstrap_expect = builtins.length cfg.nodes.agent;
      addresses.http = config.links.consulAgent.ipv4;
      ports.http = config.links.consulAgent.port;
      acl = {
        enabled = true;
        default_policy = "deny";
      };
    };
  };

  systemd.services.consul.serviceConfig.Type = "notify";

  services.grafana-agent.settings.integrations.consul_exporter = {
    enabled = true;
    instance = hostName;
    server = config.links.consulAgent.url;
  };
}