mirror of https://github.com/prometheus/node_exporter.git synced 2026-02-06 18:46:21 +01:00

Files

Julien Pivotto 0ef1d4dc15 TLS: only support TLS 1.2

TLS 1.0 and 1.1 are deprecated by major vendors (e.g. browsers).

Signed-off-by: Julien Pivotto <roidelapluie@inuits.eu>

2020-04-28 00:33:08 +02:00

testdata

Make TLS config consistent with Prometheus (#1685 )

2020-04-25 13:42:45 +02:00

README.md

Make TLS config consistent with Prometheus (#1685 )

2020-04-25 13:42:45 +02:00

tls_config_test.go

Enable golint (#1623 )

2020-02-27 11:59:02 +01:00

tls_config.go

TLS: only support TLS 1.2

2020-04-28 00:33:08 +02:00

web-config.yml

Make TLS config consistent with Prometheus (#1685 )

2020-04-25 13:42:45 +02:00

README.md

HTTPS Package for Prometheus

The https directory contains a Go package and a sample configuration file for running node_exporter with HTTPS instead of HTTP. When running a server with TLS use the flag --web.config

e.g. ./node_exporter --web.config="web-config.yml" If the config is kept within the https directory.

The config file should be written in YAML format, and is reloaded on each connection to check for new certificates and/or authentication policy.

Sample Config

tls_config:
  # Certificate and key files for server to use to authenticate to client
  cert_file: <filename>
  key_file: <filename>

  # Server policy for client authentication. Maps to ClientAuth Policies
  # For more detail on clientAuth options: [ClientAuthType](https://golang.org/pkg/crypto/tls/#ClientAuthType)
  [ client_auth_type: <string> | default = "NoClientCert" ]

  # CA certificate for client certificate authentication to the server
  [ client_ca_file: <filename> ]