diff --git a/roles/collectd/server/files/collectd.conf b/roles/collectd/server/files/collectd.conf
new file mode 100644
index 0000000000..bc2b4a9cfc
--- /dev/null
+++ b/roles/collectd/server/files/collectd.conf
@@ -0,0 +1,21 @@
+# Configuration for collectd.
+
+ScriptAlias /collectd/bin/ /usr/share/collectd/collection3/bin/
+Alias /collectd/ /usr/share/collectd/collection3/
+
+<Directory /usr/share/collectd/>
+    AddHandler cgi-script .cgi
+    DirectoryIndex bin/index.cgi
+  <IfModule mod_authz_core.c>
+    # Apache 2.4
+    Require all granted
+  </IfModule>
+  <IfModule !mod_authz_core.c>
+    # Apache 2.2
+    Order Deny,Allow
+    Deny from all
+    Allow from 127.0.0.1
+    Allow from ::1
+  </IfModule>
+</Directory>
+
diff --git a/roles/collectd/server/tasks/main.yml b/roles/collectd/server/tasks/main.yml
index 038976a30b..4c4fa64e5c 100644
--- a/roles/collectd/server/tasks/main.yml
+++ b/roles/collectd/server/tasks/main.yml
@@ -8,3 +8,13 @@
   - collectd-rrdtool
   - collectd-ping
   - collectd-web
+  tags:
+  - config
+  - collectd/server
+
+# install apache config
+- name: install collectd apache config
+  copy: src=collectd.conf dest=/etc/httpd/conf.d/collectd.conf
+  tags:
+  - config
+  - collectd/server