log_level 4
log_file {{ munin_node_logfile }}
pid_file /var/run/munin/munin-node.pid

background 1
setsid 1

user root
group {{ ansible_wheel }}

# Regexps for files to ignore
ignore_file ~$
ignore_file \.bak$
ignore_file %$
ignore_file \.dpkg-(tmp|new|old|dist)$
ignore_file \.rpm(save|new)$
ignore_file \.pod$

host_name {{ inventory_hostname }}

# Which address to bind to;
host *

# And which port
port 4949

# Require TLS
tls paranoid
tls_verify_certificate yes
tls_ca_certificate {{ tls_certs }}/ca.crt
tls_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt
tls_private_key {{ tls_private }}/{{ inventory_hostname }}.key