diff --git a/roles/mysqld_exporter/templates/web-config.yml.j2 b/roles/mysqld_exporter/templates/web-config.yml.j2
index 626169b..25b4d05 100644
--- a/roles/mysqld_exporter/templates/web-config.yml.j2
+++ b/roles/mysqld_exporter/templates/web-config.yml.j2
@@ -4,8 +4,7 @@ tls_server_config:
   client_ca_file: {{ tls_certs }}/ca.crt
   client_auth_type: RequireAndVerifyClientCert
   client_allowed_sans:
-    - prometheus01.home.foo.sh
-    - prometheus02.home.foo.sh
-    - prometheus03.home.foo.sh
-    - prometheus04.home.foo.sh
+{% for host in groups['prometheus'] %}
+    - {{ host }}
+{% endfor %}
   min_version: TLS13