How to config TLS of node exporter in external Prometheus scrape_configs?

[UnknowViewer]

I've setup a external prometheus svc on hosted server and apply kube-prometheus on kubernetes cluster. The default configuration of node_exporter daemonset is secured TLS by kube-rbac-proxy, how can I setup the scrape_configs in external prometheus?

I saved ca.cert in secret token and configured like following capture shows, but still failed