diff --git a/roles/prometheus_node_openbsd/tasks/config.yml b/roles/prometheus_node_openbsd/tasks/config.yml
new file mode 100644
index 0000000..2423f9b
--- /dev/null
+++ b/roles/prometheus_node_openbsd/tasks/config.yml
@@ -0,0 +1,28 @@
+---
+
+- name: create /etc/prometheus/node-exporter/tls
+  file:
+    path: /etc/prometheus/node-exporter/tls
+    state: directory
+    owner: _nodeexporter
+    group: _nodeexporter
+
+- name: render /etc/prometheus/node-exporter/tls/config.yml
+  template:
+    src: prometheus-node-exporter-webconfig.yml.j2
+    dest: /etc/prometheus/node-exporter/tls/config.yml
+    owner: _nodeexporter
+    group: _nodeexporter
+  notify: restart node exporter
+
+- name: configure node exporter
+  lineinfile:
+    path: /etc/rc.conf.local
+    line: >-
+      node_exporter_flags=--collector.textfile.directory={{ node_exporter_textfile_dir }}
+      {{ node_exporter_flags }}
+      --web.config=/etc/prometheus/node-exporter/tls/config.yml
+    regexp: ^node_exporter_flags=.*$
+  notify:
+    - start node exporter
+    - restart node exporter
diff --git a/roles/prometheus_node_openbsd/tasks/install.yml b/roles/prometheus_node_openbsd/tasks/install.yml
index 9d1a0ad..346db74 100644
--- a/roles/prometheus_node_openbsd/tasks/install.yml
+++ b/roles/prometheus_node_openbsd/tasks/install.yml
@@ -11,12 +11,3 @@
     owner: root
     group: _nodeexporter
     mode: 0750
-
-- name: enable node exporter
-  lineinfile:
-    path: /etc/rc.conf.local
-    line: "node_exporter_flags=--collector.textfile.directory={{ node_exporter_textfile_dir }} {{ node_exporter_flags }}"
-    regexp: ^node_exporter_flags=.*$
-  notify:
-    - start node exporter
-    - restart node exporter
diff --git a/roles/prometheus_node_openbsd/tasks/main.yml b/roles/prometheus_node_openbsd/tasks/main.yml
index 22aadff..5aec497 100644
--- a/roles/prometheus_node_openbsd/tasks/main.yml
+++ b/roles/prometheus_node_openbsd/tasks/main.yml
@@ -11,3 +11,9 @@
   tags:
     - 'role::prometheus_node_openbsd'
     - 'role::prometheus_node_openbsd:syspatch'
+
+- name: configure prometheus node exporter
+  import_tasks: config.yml
+  tags:
+    - "role::prometheus_node"
+    - "role::prometheus_node:config"