# BEGIN ANSIBLE MANAGED BLOCK
worker_processes  4;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;
    keepalive_timeout  300;
}

stream {
    server {
        # set ACL
        allow 10.99.0.2;
        deny all;
        listen 874 ssl;
        listen [::]:874 ssl;
        ssl_certificate /opt/backups/ssl/backups.crt;
        ssl_certificate_key /opt/backups/ssl/backups.key;
        proxy_pass localhost:873;
        proxy_timeout 30m;
        proxy_connect_timeout 5s;
    }
}
# END ANSIBLE MANAGED BLOCK