setuid = _unboundexporter
setgid = _unboundexporter

sslVersionMin = TLSv1.3
ciphersuites = TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
curves = X25519:prime256v1:secp384r1

key = {{ tls_private }}/{{ inventory_hostname }}.key
cert = {{ tls_certs }}/{{ inventory_hostname }}.crt

verify = 2
CAfile = {{ tls_certs }}/ca.crt

syslog = yes

[unbound_exporter]
accept = {{ network_interfaces[0].ipaddr }}:9167
connect = 127.0.0.1:9167
{% for host in groups['prometheus'] %}
checkHost = {{ host }}
{% endfor %}