node_exporter: More restrictive tls configuration
This commit is contained in:
parent
2eb65f713f
commit
11c8da0558
1 changed files with 6 additions and 0 deletions
|
@ -4,3 +4,9 @@ tls_server_config:
|
|||
cert_file: {{ tls_certs }}/{{ inventory_hostname }}.crt
|
||||
client_ca_file: {{ tls_certs }}/ca.crt
|
||||
client_auth_type: RequireAndVerifyClientCert
|
||||
client_allowed_sans:
|
||||
- prometheus01.home.foo.sh
|
||||
- prometheus02.home.foo.sh
|
||||
- prometheus03.home.foo.sh
|
||||
- prometheus04.home.foo.sh
|
||||
min_version: TLS13
|
||||
|
|
Loading…
Add table
Reference in a new issue