sslVersionMin = TLSv1.2

{% for i in prometheus_agent.scrapers if "nodeexporter" in prometheus_agent.scrapers[i] %}
; nodeexporter
[scraper {{ i }} nodeexporter]
client      = no
requireCert = yes
accept      = {{ prometheus_agent.scrapers[i].nodeexporter }}
connect     = {{ prometheus_agent.agents.nodeexporter.args['web.listen-address']|replace('[', '')|replace(']', '') }}
cert        = /etc/ssl/prometheus_agent.crt
key         = /etc/ssl/private/prometheus_agent.key
verifyPeer  = yes
CAfile      = /etc/ssl/scraper_{{ i }}.crt
{% endfor %}

{% for i in prometheus_agent.scrapers if "blackbox" in prometheus_agent.scrapers[i] and prometheus_agent.agents.blackbox.enable%}
; blackbox
[scraper {{ i }} blackbox]
client      = no
requireCert = yes
accept      = {{ prometheus_agent.scrapers[i].blackbox }}
connect     = {{ prometheus_agent.agents.blackbox.args['web.listen-address']|replace('[', '')|replace(']', '') }}
cert        = /etc/ssl/prometheus_agent.crt
key         = /etc/ssl/private/prometheus_agent.key
verifyPeer  = yes
CAfile      = /etc/ssl/scraper_{{ i }}.crt
{% endfor %}

; proxy
{% for i in prometheus_agent.scrapers if "proxy" in prometheus_agent.scrapers[i] %}
{% for j in prometheus_agent.scrapers[i].proxy|d({}) %}
;   {{ j }}
[scraper {{ i }} proxy {{ j }}]
client      = no
requireCert = yes
accept      = {{ prometheus_agent.scrapers[i].proxy[j] }}
connect     = {{ prometheus_agent.agents.proxy.mappings[j].address|replace('[', '')|replace(']', '') }}
cert        = /etc/ssl/prometheus_agent.crt
key         = /etc/ssl/private/prometheus_agent.key
verifyPeer  = yes
CAfile      = /etc/ssl/scraper_{{ i }}.crt

{% endfor %}
{% endfor %}