# server reception

# load support for tcp-based network reception
$ModLoad imtcp

# run driver in TLS-only mode
$InputTCPServerStreamDriverMode 1

# enable only one of below authentication schemes

# client is NOT authenticated
#$InputTCPServerStreamDriverAuthMode anon

# restrict access based on client certificate
# (adjust and add Peer lines as needed)
$InputTCPServerStreamDriverAuthMode x509/name
#$InputTCPServerStreamDriverPermittedPeer *.example.net
#$InputTCPServerStreamDriverPermittedPeer foo.example.org

# enable gtls reception
$InputTCPServerRun 10514