aboutsummaryrefslogtreecommitdiffstats
path: root/ansible
diff options
context:
space:
mode:
authorGravatar Joe Banks <[email protected]>2024-05-27 23:26:38 +0100
committerGravatar Joe Banks <[email protected]>2024-05-30 15:14:20 +0100
commit4c0f5caf932f32a563691371e48eb6f4fa1679d8 (patch)
treea5ce3cb09ff23fb51e3aaeec7b6e2772797b99b3 /ansible
parentSet secure mode (diff)
Update Prometheus web config with mTLS preferences
Diffstat (limited to 'ansible')
-rw-r--r--ansible/host_vars/lovelace/prometheus.yml3
1 files changed, 3 insertions, 0 deletions
diff --git a/ansible/host_vars/lovelace/prometheus.yml b/ansible/host_vars/lovelace/prometheus.yml
index 831ce8f..be8e860 100644
--- a/ansible/host_vars/lovelace/prometheus.yml
+++ b/ansible/host_vars/lovelace/prometheus.yml
@@ -11,6 +11,9 @@ prometheus_web_configuration:
cert_file: "/etc/letsencrypt/live/prometheus.{{ inventory_hostname }}.box.pydis.wtf/fullchain.pem"
key_file: "/etc/letsencrypt/live/prometheus.{{ inventory_hostname }}.box.pydis.wtf/privkey.pem"
+ # mTLS preferences
+ client_auth_type: RequireAndVerifyClientCert
+ client_ca_file: /opt/pydis/ca.pem
prometheus_configuration:
global: