diff options
| author |  Joe Banks <[email protected]> | 2024-05-27 23:26:38 +0100 |
|---|---|---|
| committer | Joe Banks <[email protected]> | 2024-05-30 15:14:20 +0100 |
| commit | 4c0f5caf932f32a563691371e48eb6f4fa1679d8 (patch) | |
| tree | a5ce3cb09ff23fb51e3aaeec7b6e2772797b99b3 | |
| parent | Set secure mode (diff) | |
Update Prometheus web config with mTLS preferences
| -rw-r--r-- | ansible/host_vars/lovelace/prometheus.yml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/ansible/host_vars/lovelace/prometheus.yml b/ansible/host_vars/lovelace/prometheus.yml index 831ce8f..be8e860 100644 --- a/ansible/host_vars/lovelace/prometheus.yml +++ b/ansible/host_vars/lovelace/prometheus.yml @@ -11,6 +11,9 @@ prometheus_web_configuration: cert_file: "/etc/letsencrypt/live/prometheus.{{ inventory_hostname }}.box.pydis.wtf/fullchain.pem" key_file: "/etc/letsencrypt/live/prometheus.{{ inventory_hostname }}.box.pydis.wtf/privkey.pem" + # mTLS preferences + client_auth_type: RequireAndVerifyClientCert + client_ca_file: /opt/pydis/ca.pem prometheus_configuration: global: |