From 7575c9975d87ed7a119b89a9b388c5caafa5cff3 Mon Sep 17 00:00:00 2001
From: Houzhong Xu <houzhongxu@seekkey.tech>
Date: Thu, 9 Oct 2025 04:43:39 +0000
Subject: [PATCH] Fix onecloud1 bind_addr and add client block for dual-role
 configuration

---
 nomad-configs/servers/onecloud1.hcl | 32 +++++++++++++++++++++++++----
 1 file changed, 28 insertions(+), 4 deletions(-)

diff --git a/nomad-configs/servers/onecloud1.hcl b/nomad-configs/servers/onecloud1.hcl
index 37b2ed7..9480f25 100644
--- a/nomad-configs/servers/onecloud1.hcl
+++ b/nomad-configs/servers/onecloud1.hcl
@@ -4,7 +4,7 @@ plugin_dir = "/opt/nomad/plugins"
 log_level = "INFO"
 name = "onecloud1"
 
-bind_addr = "0.0.0.0"
+bind_addr = "onecloud1.tailnet-68f9.ts.net"
 
 addresses {
   http = "onecloud1.tailnet-68f9.ts.net"
@@ -32,15 +32,39 @@ server {
       "semaphore.tailnet-68f9.ts.net:4648",
       "ash1d.tailnet-68f9.ts.net:4648", 
       "ash2e.tailnet-68f9.ts.net:4648",
-      "onecloud1.tailnet-68f9.ts.net:4648",
+      "ch2.tailnet-68f9.ts.net:4648",
       "ch3.tailnet-68f9.ts.net:4648",
       "onecloud1.tailnet-68f9.ts.net:4648",
-      "de.tailnet-68f9.ts.net:4648",
-      "hcp1.tailnet-68f9.ts.net:4648"
+      "de.tailnet-68f9.ts.net:4648"
     ]
   }
 }
 
+client {
+  enabled = true
+  network_interface = "tailscale0"
+  
+  host_volume "fnsync" {
+    path = "/mnt/fnsync"
+    read_only = false
+  }
+
+  host_volume "vault-storage" {
+    path = "/opt/nomad/data/vault-storage"
+    read_only = false
+  }
+
+  host_volume "traefik-certs" {
+    path = "/opt/traefik/certs"
+    read_only = false
+  }
+
+  host_volume "waypoint-data" {
+    path = "/opt/waypoint"
+    read_only = false
+  }
+}
+
 
 consul {
   address = "ch4.tailnet-68f9.ts.net:8500,ash3c.tailnet-68f9.ts.net:8500,warden.tailnet-68f9.ts.net:8500"