unbound_exporter: Add TLS support

Currently unbound_exporter doesn't support TLS connections so proxy connections through stunnel.
2025-01-19 17:51:18 +00:00 · 2025-01-19 17:51:18 +00:00 · 964e841c1d
commit 964e841c1d
parent 271eb09669
3 changed files with 35 additions and 17 deletions
--- a/roles/unbound_exporter/templates/web-config.yml.j2
+++ b/roles/unbound_exporter/templates/web-config.yml.j2
@ -1,11 +0,0 @@
---
-tls_server_config:
-  key_file: {{ tls_private }}/{{ inventory_hostname }}.key
-  cert_file: {{ tls_certs }}/{{ inventory_hostname }}.crt
-  client_ca_file: {{ tls_certs }}/ca.crt
-  client_auth_type: RequireAndVerifyClientCert
-  client_allowed_sans:
-{% for host in groups['prometheus'] %}
-    - {{ host }}
-{% endfor %}
-  min_version: TLS13