diff --git a/roles/node_exporter/templates/web-config.yml.j2 b/roles/node_exporter/templates/web-config.yml.j2
index 01c911f..edc7ca3 100644
--- a/roles/node_exporter/templates/web-config.yml.j2
+++ b/roles/node_exporter/templates/web-config.yml.j2
@@ -4,3 +4,9 @@ tls_server_config:
   cert_file: {{ tls_certs }}/{{ inventory_hostname }}.crt
   client_ca_file: {{ tls_certs }}/ca.crt
   client_auth_type: RequireAndVerifyClientCert
+  client_allowed_sans:
+    - prometheus01.home.foo.sh
+    - prometheus02.home.foo.sh
+    - prometheus03.home.foo.sh
+    - prometheus04.home.foo.sh
+  min_version: TLS13