summaryrefslogtreecommitdiff
path: root/templates/server/_default-header.conf.erb
diff options
context:
space:
mode:
authorSteffen Zieger <me@saz.sh>2013-12-26 04:12:19 -0800
committerSteffen Zieger <me@saz.sh>2013-12-26 04:12:19 -0800
commitacf2755cda80e2ecd107ed8de4d275c383db0487 (patch)
tree8a31bba5306311dd81ec90bf443c501304c24320 /templates/server/_default-header.conf.erb
parentf8a05e0e6dd7a40fe53329a20ff81227b23bb398 (diff)
parentfb924446a69b9ce07ea898d5d301ccca8de72b2f (diff)
Merge pull request #40 from raphink/dev/ssl
SSL support
Diffstat (limited to 'templates/server/_default-header.conf.erb')
-rw-r--r--templates/server/_default-header.conf.erb13
1 files changed, 13 insertions, 0 deletions
diff --git a/templates/server/_default-header.conf.erb b/templates/server/_default-header.conf.erb
index 19eb173..95391ce 100644
--- a/templates/server/_default-header.conf.erb
+++ b/templates/server/_default-header.conf.erb
@@ -16,5 +16,18 @@ $ModLoad imtcp
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
<% end -%>
+<% if scope.lookupvar('rsyslog::server::ssl') -%>
+# Server side SSL.
+$DefaultNetstreamDriver gtls
+
+# Cert files.
+$DefaultNetstreamDriverCAFile <%= scope.lookupvar('rsyslog::server::ssl_ca') %>
+$DefaultNetstreamDriverCertFile <%= scope.lookupvar('rsyslog::server::ssl_cert') %>
+$DefaultNetstreamDriverKeyFile <%= scope.lookupvar('rsyslog::server::ssl_key') %>
+
+$InputTCPServerStreamDriverMode 1
+$InputTCPServerStreamDriverAuthMode anon
+<% end -%>
+
# Switch to remote ruleset
$RuleSet remote