# Certificates
global(DefaultNetstreamDriverCAFile="{{ tls_bundle }}"
       DefaultNetstreamDriverCertFile="{{ tls_certs }}/{{ inventory_hostname }}.crt"
       DefaultNetstreamDriverKeyFile="{{ tls_private }}/{{ inventory_hostname }}.key")

# Forward to remote TLS TCP server
action(type="omfwd"
       Target="{{ log_server }}"
       Protocol="tcp"
       Port="6514"
       StreamDriver="gtls"
       StreamDriverMode="1"
       StreamDriverAuthMode="x509/name"
       StreamDriverPermittedPeers="{{ log_server }}"
       queue.filename="{{ (log_server) }}.queue"
       queue.maxDiskSpace="1G"
       queue.saveOnShutdown="on"
       queue.type="LinkedList"
       Action.ResumeRetryCount="-1")