f85199c778
Some services (such as Redis) can't use mod_proxy as a TLS proxy, since they're not HTTP services. So stunnel is necessary for these. Thus, we add manifests to configure it as such. bp tls-via-certmonger Change-Id: Ic4a2dac7b3831e4780105e3b05e9c5afcf15c79c
20 lines
351 B
Desktop File
20 lines
351 B
Desktop File
[Unit]
|
|
Description=SSL tunnel for network daemons
|
|
After=network.target
|
|
After=syslog.target
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
Alias=stunnel.target
|
|
|
|
[Service]
|
|
Type=forking
|
|
ExecStart=/usr/bin/stunnel /etc/stunnel/stunnel.conf
|
|
ExecStop=/usr/bin/killall -9 stunnel
|
|
|
|
# Give up if ping don't get an answer
|
|
TimeoutSec=600
|
|
|
|
Restart=always
|
|
PrivateTmp=false
|