api_addr      = "<%= @config['api_addr'] %>"
cluster_addr  = "<%= @config['cluster_addr'] %>"
disable_mlock = <%= @config['disable_mlock'] %>
log_level     = "<%= @config['log_level'] %>"

listener "tcp" {
  address         = "<%= @config['listener']['address'] %>"
  cluster_address = "<%= @config['listener']['cluster_address'] %>"
  tls_cert_file   = "<%= @config['listener']['tls_cert_file'] %>"
  tls_key_file    = "<%= @config['listener']['tls_key_file'] %>"
  tls_min_version = "<%= @config['listener']['tls_min_version'] %>"

  telemetry {
    unauthenticated_metrics_access = <%= @config['listener']['telemetry']['unauthenticated_metrics_access'] %>
  }
}

storage "<%= @config['storage']['type'] %>" {
  path    = "<%= @config['storage']['path'] %>"
  node_id = "<%= @config['storage']['node_id'] %>"

  <% @config['storage']['retry_join'].each do |retry_join_config| %>
  retry_join {
    leader_api_addr = "<%= retry_join_config['leader_api_addr'] %>"
  }
  <% end %>
}

seal "<%= @config['seal']['type'] %>" {
  kms_key_id = "<%= @config['seal']['kms_key_id'] %>"
  region     = "<%= @config['seal']['region'] %>"
  access_key = "<%= @credentials['access_key'] %>"
  secret_key = "<%= @credentials['secret_key'] %>"
}

telemetry {
  prometheus_retention_time = "<%= @config['telemetry']['prometheus_retention_time'] %>"
  disable_hostname = <%= @config['telemetry']['disable_hostname'] %>
}