Hello,

I am running:

node_exporter, version 1.7.0 (branch: HEAD, revision: 
7333465abf9efba81876303bb57e6fadb946041b)
  build date:       20231112-23:53:35
  go version:       go1.21.4
  platform:         linux/amd64
  tags:             netgo osusergo static_build



Vulnerability scan complained that HSTS is not enabled so I wanted to 
enable it:

tls_server_config:
  cert_file: "/opt/node_exporter/node_exporter.pem"
  key_file: "/opt/node_exporter/node_exporter.key"

  min_version: "TLS12"
  max_version: "TLS13"

  client_auth_type: "NoClientCert"

basic_auth_users:
        userxxxx: 'xxxxxxxxxxxxxxxxxxxxxxxxxxx'

http_server_config:
  Strict-Transport-Security: max-age=31536000  # 1 year


Unfortunately I get this error:

node_exporter: ts=2024-01-17T07:30:04.483Z caller=node_exporter.go:223 
level=error err="yaml: unmarshal errors:\n  line 14: field 
Strict-Transport-Security not found in type web.HTTPConfig"
systemd: node_exporter.service: main process exited, code=exited, 
status=1/FAILURE


I tried to configure it based on this documentation:
https://prometheus.io/docs/prometheus/latest/configuration/https/

probably I need the other parameters, too like:
Strict-Transport-Security: max-age=<expire-time>; includeSubDomains; 
preload 
How to get this working?

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to prometheus-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-users/51df262d-deb5-42ab-9e68-a7dd75e63cffn%40googlegroups.com.

Reply via email to