key = /etc/pki/tls/private/{{ inventory_hostname }}.key
cert = /etc/pki/tls/certs/{{ inventory_hostname }}.crt
client = no

verify = 2
CAfile = /etc/pki/tls/certs/ca.crt

sslVersion = {{ tls_protocols }}
ciphers = {{ tls_ciphers }}

exec = /usr/bin/rsync
execargs = rsync --daemon --config=/etc/rsyncd.conf