unbound_exporter: Initial version of role

2025-01-19 16:15:24 +00:00 · 2025-01-19 16:15:24 +00:00 · ae491f8977
commit ae491f8977
parent d4bfc7586f
3 changed files with 52 additions and 0 deletions
--- a/roles/unbound_exporter/templates/web-config.yml.j2
+++ b/roles/unbound_exporter/templates/web-config.yml.j2
@ -0,0 +1,11 @@
+---
+tls_server_config:
+  key_file: {{ tls_private }}/{{ inventory_hostname }}.key
+  cert_file: {{ tls_certs }}/{{ inventory_hostname }}.crt
+  client_ca_file: {{ tls_certs }}/ca.crt
+  client_auth_type: RequireAndVerifyClientCert
+  client_allowed_sans:
+{% for host in groups['prometheus'] %}
+    - {{ host }}
+{% endfor %}
+  min_version: TLS13