diff --git a/inventories/servers.yml b/inventories/servers.yml
index 13ce298..784f175 100644
--- a/inventories/servers.yml
+++ b/inventories/servers.yml
@@ -11,3 +11,6 @@ servers:
           gateway: 192.168.100.1
           netmask: 255.255.255.0
           interface: enp0s25
+      vpn:
+        v4:
+          address: 10.80.0.1
diff --git a/roles/base/handlers/main.yml b/roles/base/handlers/main.yml
index 6d51563..cf0b339 100644
--- a/roles/base/handlers/main.yml
+++ b/roles/base/handlers/main.yml
@@ -4,3 +4,7 @@
     name: systemd-journald
     state: restarted
 
+- name: restart-node-exporter
+  systemd:
+    name: prometheus-node-exporter
+    state: restarted
diff --git a/roles/base/tasks/monitoring.yml b/roles/base/tasks/monitoring.yml
index 8046fef..f5d6669 100644
--- a/roles/base/tasks/monitoring.yml
+++ b/roles/base/tasks/monitoring.yml
@@ -3,3 +3,10 @@
   apt:
     name: prometheus-node-exporter
     state: present
+
+- name: set node exporter config
+  lineinfile:
+    path: /etc/default/prometheus-node-exporter
+    regexp: '^ARGS='
+    line: ARGS="--web.listen-address={{ vpn.v4.address }}:9100"
+  notify: restart-node-exporter