ARGS=""

# Extra command-line flags are passed to the exporter via ARGS above.
#
# As of upstream 0.2.1 basic auth is built in. To protect the /metrics
# endpoint, point the exporter at a username and a file containing the
# plain-text password (both flags are required together):
#
#ARGS="--username chocolate --password-file /etc/sysconfig/lsws-prometheus-exporter.password"
#
# (Only the file path appears in `ps`, not the password contents.)
#
# On systemd >= 247 (RHEL 9+, Fedora) you can instead feed the password via a
# systemd credential so it lives in tmpfs; set only the username here
# (ARGS="--username chocolate") and use the drop-in example shipped at
# /usr/share/doc/lsws-prometheus-exporter/credential.conf.example
# NOTE: that credential drop-in does NOT work on RHEL/EL 8 (systemd 239) --
# use the plain --password-file form above there.
