consul: keep communication on the local network

Listen only on the local network interface and avoid the tailnet overlay.

Also spell out nuc as 'nuc.sunrise.box` to resolve to the local IP
address and not to the tailnet address.

modules/consul/base.nix

@@ -5,9 +5,7 @@
     enable = true;
 
     extraConfig = {
-      retry_join = [ "nuc" ];
-
-      client_addr = [ "0.0.0.0" ];
+      bind_addr = "{{ GetPrivateInterfaces | include \"network\" \"192.168.1.0/24\" | attr \"address\" }}";
 
       telemetry = {
         disable_hostname = true;

modules/consul/client.nix

@@ -7,6 +7,7 @@
 
   services.consul = {
     extraConfig = {
+      retry_join = [ "nuc.sunrise.box" ];
       server = false;
     };
   };