{{ ansible_managed | comment }}

server {
    listen {{ lan_address }}:9090 ssl;
    ssl_certificate /etc/prometheus/prometheus-{{ lan_address }}.crt;
    ssl_certificate_key /etc/prometheus/prometheus-{{ lan_address }}.key;
    ssl_client_certificate /etc/prometheus/ca.crt;
    ssl_verify_client on;

    location / {
        proxy_pass http://127.0.0.1:9090;
    }
}