diff --git a/roles/prometheus-node/tasks/main.yml b/roles/prometheus-node/tasks/main.yml
index f5a5e40b..8a175e98 100644
--- a/roles/prometheus-node/tasks/main.yml
+++ b/roles/prometheus-node/tasks/main.yml
@@ -1,5 +1,4 @@
 ---
-
 - name: Install Prometheus node-exporter
   apt:
     update_cache: true
@@ -7,3 +6,13 @@
   register: apt_result
   retries: 3
   until: apt_result is succeeded
+
+# Doesn't work on Debian Stretch
+- name: Make Prometheus node-exporter listen on adm only
+  when:
+    - ansible_distribution_release == 'buster'
+  lineinfile:
+    path: /etc/default/prometheus-node-exporter
+    regexp: '^ARGS='
+    line: "ARGS=\"--web.listen-address={{ ansible_fqdn }}:9100\""
+  notify: Restart prometheus-node-exporter