Make prometheus node exporter listen only on adm

roles/prometheus-node/handlers/main.yml

@@ -0,0 +1,5 @@
+---
+- name: Restart prometheus-node-exporter
+  service:
+    name: prometheus-node-exporter
+    state: restarted

roles/prometheus-node/tasks/main.yml

@@ -6,3 +6,10 @@
   register: apt_result
   retries: 3
   until: apt_result is succeeded
+
+- name: Make Prometheus node-exporter listen on adm only
+  lineinfile:
+    path: /etc/default/prometheus-node-exporter
+    regexp: '^ARGS='
+    line: "ARGS=\"--web.listen-address={{ ansible_fqdn }}:9100\""
+  notify: Restart prometheus-node-exporter