monitoring (blackbox) of internal tls servers

templates/prometheus.yml.j2

@@ -109,7 +109,29 @@ scrape_configs:
       - target_label: __address__
         replacement: {{exporter}}:9100
 {%     endif %}
-
+{%     if blackbox_monitoring.internal_tls is defined %}
+  - job_name: {{exporter}}_internal_tls
+    scheme: https
+    tls_config:
+        ca_file: '/etc/ssl/prometheus_client/root.ca.crt'
+        cert_file: '/etc/ssl/prometheus_client/{{fqdn}}.crt'
+        key_file: '/etc/ssl/prometheus_client/{{fqdn}}.key'
+    metrics_path: /ssl_probe
+    params:
+      module: [internal_ca_tcp]
+    static_configs:
+      - targets:
+{%       for host in blackbox_monitoring.internal_tls %}
+        - {{host}}
+{%       endfor %}
+    relabel_configs:
+      - source_labels: [__address__]
+        target_label: __param_target
+      - source_labels: [__param_target]
+        target_label: instance
+      - target_label: __address__
+        replacement: {{exporter}}:9100
+{%     endif %}
 {%     if blackbox_monitoring.dns is defined %}
 {%       for domain in blackbox_monitoring.dns %}
   - job_name: {{exporter}}_{{domain}}