I finally took the following configuration :
- Migration policy is "don't migrate"
- cluster.server-quorum-type is none
- cluster.quorum-type is none
When a host is down, a manual migration allows me to use the other.
Later, I'll add another host so that I get a real HA.