VAULT_CAPATH=./certs/ca.pem

CONSUL_CACERT=./certs/ca.pem
CONSUL_CLIENT_CERT=./certs/cert.pem
CONSUL_CLIENT_KEY=./certs/key.pem
CONSUL_HTTP_TOKEN={{ with secret "consul/creds/gitops" }}{{ .Data.token }}{{ end }}

NOMAD_ADDR=https://hashi.fluence.dev:4646
NOMAD_CAPATH=./certs/ca.pem
NOMAD_CLIENT_CERT=./certs/cert.pem
NOMAD_CLIENT_KEY=./certs/key.pem
NOMAD_TOKEN={{ with secret "nomad/creds/gitops" }}{{ .Data.secret_id }}{{ end }}

CLOUDFLARE_API_TOKEN={{ with secret "kv/cloudflare/personal" }}{{ .Data.token }}{{ end }}
CLOUDFLARE_DNS_API_TOKEN=$CLOUDFLARE_API_TOKEN

{{- with secret "pki/issue/internal" "ttl=30m" "common_name=ci.node.consul" -}}
{{ .Data.issuing_ca  | writeToFile "./certs/ca.pem" "" "" "0644" }}
{{ .Data.certificate | writeToFile "./certs/cert.pem" "" "" "0644" }}
{{ .Data.private_key | writeToFile "./certs/key.pem" "" "" "0644" }}
{{- end -}}