ribbybibby / ssl_exporter

Exports Prometheus metrics for TLS certificates
Apache License 2.0
504 stars 95 forks source link

Consider defaulting to no modules #109

Open ribbybibby opened 1 year ago

ribbybibby commented 1 year ago

At the moment the exporter is a bit of an open proxy by default. It enables all the probers in their default configuration.

People running it should be tightly controlling access to the exporter endpoint but in reality I can imagine it sits unsecured on open networks a lot.

I should consider defaulting to no modules, and requiring that they are enabled explicitly by the user.