services:
  consul:
    container_name: consul
    image: hashicorp/consul:latest
    restart: unless-stopped
    command: agent -server -ui -node=server-1 -bootstrap-expect=1 -client=0.0.0.0
    
    ports:
      - "8500:8500"      # UI web et API HTTP
      - "8600:8600/udp"  # DNS
      - "8600:8600/tcp"  # DNS
    
    environment:
      # Configuration ACL pour la production
      # default_policy: deny = tout est interdit par defaut
      # enable_token_persistence: true = tokens sauvegardes sur disque
      CONSUL_LOCAL_CONFIG: >-
        {
          "acl": {
            "enabled": true,
            "default_policy": "deny",
            "enable_token_persistence": true
          }
        }
    
    volumes:
      - consul-data:/consul/data
    
    networks:
      gitgit_syoul_fr_gitea_net:
        aliases:
          - consul
    
    healthcheck:
      test: ["CMD", "consul", "members"]
      interval: 10s
      timeout: 3s
      retries: 3

volumes:
  consul-data:

networks:
  gitgit_syoul_fr_gitea_net:
    external: true