#
# Ansible managed
#

[Unit]
Description=Prometheus Node Exporter
After=network-online.target

[Service]
Type=simple
User=node_exporter
Group=node_exporter
ExecStart=/usr/local/bin/node_exporter \
    '--collector.disable-defaults' \
    '--collector.cpu' \
    '--collector.stat' \
'--collector.filesystem' \
    '--collector.filesystem.fs-types-exclude=^(tmpfs|proc|procfs)$' \
    '--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|run|var/(container_share|spool/cron/crontabs|log/journal))($|/)' \
    '--collector.meminfo' \
'--collector.systemd' \
    '--collector.systemd.unit-include=^(atd|cron|rsyslog|script_exporter|node_exporter|vector|fail2ban|logrotate).*' \
    '--web.listen-address=0.0.0.0:9100' \
    '--web.telemetry-path=/metrics'

SyslogIdentifier=node_exporter
Restart=always
RestartSec=1
StartLimitInterval=0

ProtectHome=read-only
NoNewPrivileges=yes

ProtectSystem=strict
ProtectControlGroups=true
ProtectKernelModules=true
ProtectKernelTunables=yes

[Install]
WantedBy=multi-user.target