[Unit]
Description=Prometheus NGINX Exporter
After=syslog.target
After=network.target

[Service]
Type=simple
User=nginx_exporter
Group=nginx_exporter
ExecStart=/usr/local/bin/nginx_exporter \
    --web.config.file=/etc/nginx_exporter/web-config.yml \
{% for host in groups['proxy'] %}
    --nginx.scrape-uri=https://{{ host }}/stub_status \
{% endfor %}
    --nginx.ssl-ca-cert={{ tls_certs }}/ca.crt \
    --nginx.ssl-client-cert={{ tls_certs }}/{{ inventory_hostname }}.crt \
    --nginx.ssl-client-key={{ tls_private }}/{{ inventory_hostname }}.key
Restart=always

[Install]
WantedBy=multi-user.target