Hello,

I am running:

node_exporter, version 1.7.0 (branch: HEAD, revision: 
7333465abf9efba81876303bb57e6fadb946041b)
  build date:       20231112-23:53:35
  go version:       go1.21.4
  platform:         linux/amd64
  tags:             netgo osusergo static_build



Vulnerability scan complained that HSTS is not enabled so I wanted to 
enable it:

tls_server_config:
  cert_file: "/opt/node_exporter/node_exporter.pem"
  key_file: "/opt/node_exporter/node_exporter.key"

  min_version: "TLS12"
  max_version: "TLS13"

  client_auth_type: "NoClientCert"

basic_auth_users:
        userxxxx: 'xxxxxxxxxxxxxxxxxxxxxxxxxxx'

http_server_config:
  Strict-Transport-Security: max-age=31536000  # 1 year


Unfortunately I get this error:

node_exporter: ts=2024-01-17T07:30:04.483Z caller=node_exporter.go:223 
level=error err="yaml: unmarshal errors:\n  line 14: field 
Strict-Transport-Security not found in type web.HTTPConfig"
systemd: node_exporter.service: main process exited, code=exited, 
status=1/FAILURE


I tried to configure it based on this documentation:
https://prometheus.io/docs/prometheus/latest/configuration/https/

probably I need the other parameters, too like:
Strict-Transport-Security: max-age=<expire-time>; includeSubDomains; 
preload 
How to get this working?

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-users/51df262d-deb5-42ab-9e68-a7dd75e63cffn%40googlegroups.com.

Reply via email to