salt/base/consul/files/conf.d/tls.json

{
  "ca_file": "/etc/deployment/ssl/certs/ca-chain-deployment.crt",
  "cert_file": "/etc/deployment/ssl/certs/deployment.crt",
  "key_file": "/etc/deployment/ssl/private/deployment.key",
  "verify_incoming": true,
  "verify_outgoing": true
}