diff --git a/README.md b/README.md
index ed27010361c2b9b0db766b14ebddfad9e5eb8d91..0e91f948485adfde1759375d83ce332b0ca16b1a 100644
--- a/README.md
+++ b/README.md
@@ -130,6 +130,9 @@ Add the radius user to the winbind privileged group. You must install winbind se
 ##### `log_destination`
 Configure destination of log messages. Valid values are `files`, `syslog`, `stdout` and `stderr`. Default: `files`.
 
+##### `syslog_facility`
+Configure which syslog facility to use when `log_destination` is set to `syslog`. Default: `daemon`.
+
 ##### `syslog`
 Add a syslog rule (using the `saz/rsyslog` module). Default: `false`.
 
diff --git a/manifests/init.pp b/manifests/init.pp
index 6fd36d3bcf176d306c7f1a139cfb93e3895211df..d172675bf0eb9fa2268b663ba8bb999654968995 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -15,6 +15,7 @@ class freeradius (
   Boolean $winbind_support         = false,
   String $log_destination          = 'files',
   Boolean $syslog                  = false,
+  String $syslog_facility          = 'daemon',
   Freeradius::Boolean $log_auth    = 'no',
   Boolean $preserve_mods           = true,
   Boolean $correct_escapes         = true,
diff --git a/templates/radiusd.conf.erb b/templates/radiusd.conf.erb
index 3e7823f60d038f2fc7102f3447af829fbe56ad13..bd3a38a4b753c85ea7c4f0d7fbec69edc8e2cf24 100644
--- a/templates/radiusd.conf.erb
+++ b/templates/radiusd.conf.erb
@@ -327,7 +327,7 @@ log {
 	#  The exact values permitted here are OS-dependent.  You probably
 	#  don't want to change this.
 	#
-	syslog_facility = daemon
+	syslog_facility = <%= @syslog_facility %>
 
 	#  Log the full User-Name attribute, as it was found in the request.
 	#