#Debugging

Log level and log path can be set using the TF_LOG and TF_LOG_PATH environment variables. See https://www.terraform.io/docs/internals/debugging.html

#TODO

• Looks like the CA key is persisted in the Terraform state. :gulp: Need to figure out how to not do that. Will probably require storing it somewhere other than git.
• It would be nice to have all nodes in their own module, i.e. module.nodes.consul-servers rather than module.consul-servers. This would make it easier to apply only node changes, which may be necessary to do before applying DNS record changes.
• Look into adding a healthcheck provisioner? See: https://www.hashicorp.com/blog/zero-downtime-updates-with-terraform/