diff --git a/templates/etc/rsyncd.conf.j2 b/templates/etc/rsyncd.conf.j2
index 4a8b652..c5ab2e3 100644
--- a/templates/etc/rsyncd.conf.j2
+++ b/templates/etc/rsyncd.conf.j2
@@ -1,69 +1,19 @@
 uid = nobody
 gid = mirror
 use chroot = yes
-max connections = 40
+max connections = {{ rsync_max_connections }}
 pid file = /var/run/rsyncd.pid
-exclude = lost+found/
+exclude = {{ rsync_exclude }}
 transfer logging = yes
-timeout = 600
+timeout = {{ rsync_timeout }}
 ignore nonreadable = yes
-dont compress = *.gz *.tgz *.zip *.z *.Z *.rpm *.deb *.bz2 *.iso
+dont compress = {{ rsync_no_compress }}
 reverse lookup = no
 forward lookup = no
 motd file = /etc/rsyncd-motd
 
-[rocky-staging]
-        path = /mnt/repos-staging/mirror/pub/rocky
-	comment = Rocky Linux Staging Repositories
-        read only = true
-	refuse options = checksum
-	list = false
+{% for path in paths %}
+[{{ path.name }}]
+{{ path.content|indent(width=8) }}
 
-[rocky-production]
-        path = /mnt/repos-production
-	comment = Rocky Linux Production
-        read only = true
-	refuse options = checksum
-	list = true
-
-[rocky-linux]
-        path = /mnt/repos-production/mirror/pub/rocky
-	comment = Rocky Linux Production
-        read only = true
-	refuse options = false
-	list = false
-
-[rocky-sigs]
-        path = /mnt/repos-production/mirror/pub/sigs
-	comment = Rocky Linux Special Interest Groups
-        read only = true
-	refuse options = checksum
-	list = false
-
-[rocky]
-        path = /mnt/repos-production
-	comment = Rocky Linux - !!Deprecated Module!! - Please use rocky-linux
-        read only = true
-	refuse options = checksum
-	list = true
-
-[rocky-everything]
-	path = /mnt/repos-production/mirror/
-	comment = All content available on the mirror. Rocky (Prod+Vault), CentOS (Vault)
-        read only = true
-	refuse options = checksum
-	list = true
-
-[rocky-vault]
-	path = /mnt/repos-production/mirror/vault/rocky
-	comment = Rocky Linux Vault - Archived Releases
-	read only = true
-	refuse options = checksum
-	list = true
-
-[centos-vault]
-	path = /mnt/repos-production/mirror/vault/centos
-	comment = CentOS 8 Vault
-	read only = true
-	refuse options = checksum
-	list = true
+{% endfor %}
diff --git a/vars/rsync.yml b/vars/rsync.yml
new file mode 100644
index 0000000..e35c713
--- /dev/null
+++ b/vars/rsync.yml
@@ -0,0 +1,63 @@
+---
+rsync_max_connections: '30'
+rsync_no_compress: '*.gz *.tgz *.zip *.z *.Z *.rpm *.deb *.bz2 *.iso'
+rsync_timeout: '600'
+rsync_exclude: 'lost+found/ .snapshot/ .~tmp~/ /.private/ /.private/** **/.nfs*'
+rsync_paths:
+  - name: rocky-staging
+    content: |
+      path = /mnt/repos-staging/mirror/pub/rocky
+      comment = Rocky Linux Staging Repositories
+      read only = true
+      refuse options = checksum
+      list = false
+  - name: rocky-production
+    content: |
+      path = /mnt/repos-production
+      comment = Rocky Linux Production
+      read only = true
+      refuse options = checksum
+      list = true
+  - name: rocky-linux
+    content: |
+      path = /mnt/repos-production/mirror/pub/rocky
+      comment = Rocky Linux Production
+      read only = true
+      refuse options = false
+      list = false
+  - name: rocky-sigs
+    content: |
+      path = /mnt/repos-production/mirror/pub/sigs
+      comment = Rocky Linux Special Interest Groups
+      read only = true
+      refuse options = checksum
+      list = false
+  - name: rocky
+    content: |
+      path = /mnt/repos-production
+      comment = Rocky Linux - !!Deprecated Module!! - Please use rocky-linux
+      read only = true
+      refuse options = checksum
+      list = true
+  - name: rocky-everything
+    content: |
+      path = /mnt/repos-production/mirror/
+      comment = All content available on the mirror. Rocky (Prod+Vault), CentOS (Vault)
+      read only = true
+      refuse options = checksum
+      list = true
+  - name: rocky-vault
+    content: |
+      path = /mnt/repos-production/mirror/vault/rocky
+      comment = Rocky Linux Vault - Archived Releases
+      read only = true
+      refuse options = checksum
+      list = true
+  - name: centos-vault
+    content: |
+      path = /mnt/repos-production/mirror/vault/centos
+      comment = CentOS 8 Vault
+      read only = true
+      refuse options = checksum
+      list = true
+...