mgmt/nomad-configs-tofu/client-template.hcl

70 lines
1.4 KiB
HCL

# Nomad 客户端节点配置模板 - 基于现有 Ansible 配置
datacenter = "dc1"
data_dir = "/opt/nomad/data"
plugin_dir = "/opt/nomad/plugins"
log_level = "INFO"
name = "NODE_NAME"
bind_addr = "NODE_NAME.tailnet-68f9.ts.net"
addresses {
http = "NODE_NAME.tailnet-68f9.ts.net"
rpc = "NODE_NAME.tailnet-68f9.ts.net"
serf = "NODE_NAME.tailnet-68f9.ts.net"
}
advertise {
http = "NODE_NAME.tailnet-68f9.ts.net:4646"
rpc = "NODE_NAME.tailnet-68f9.ts.net:4647"
serf = "NODE_NAME.tailnet-68f9.ts.net:4648"
}
ports {
http = 4646
rpc = 4647
serf = 4648
}
server {
enabled = false
}
client {
enabled = true
meta {
consul = "true"
consul_version = "1.21.5"
}
# 激进的垃圾清理策略
gc_interval = "5m"
gc_disk_usage_threshold = 80
gc_inode_usage_threshold = 70
}
plugin "nomad-driver-podman" {
config {
socket_path = "unix:///run/podman/podman.sock"
volumes {
enabled = true
}
}
}
consul {
address = "ch4.tailnet-68f9.ts.net:8500"
server_service_name = "nomad"
client_service_name = "nomad-client"
auto_advertise = true
server_auto_join = true
client_auto_join = true
}
vault {
enabled = true
address = "http://ch4.tailnet-68f9.ts.net:8200,http://ash3c.tailnet-68f9.ts.net:8200,http://warden.tailnet-68f9.ts.net:8200"
token = "hvs.A5Fu4E1oHyezJapVllKPFsWg"
create_from_role = "nomad-cluster"
tls_skip_verify = true
}