From f130e6c8c0b4dd6b4e59ded722445a3864333057 Mon Sep 17 00:00:00 2001 From: Juan Antonio Osorio Robles Date: Thu, 24 Aug 2017 13:21:11 +0000 Subject: Add manifests to install and configure stunnel Some services (such as Redis) can't use mod_proxy as a TLS proxy, since they're not HTTP services. So stunnel is necessary for these. Thus, we add manifests to configure it as such. bp tls-via-certmonger Change-Id: Ic4a2dac7b3831e4780105e3b05e9c5afcf15c79c (cherry picked from commit f85199c77826017e383534051ada57ef1ea4ddcc) --- templates/stunnel/foreground.erb | 1 + templates/stunnel/service.erb | 6 ++++++ 2 files changed, 7 insertions(+) create mode 100644 templates/stunnel/foreground.erb create mode 100644 templates/stunnel/service.erb (limited to 'templates') diff --git a/templates/stunnel/foreground.erb b/templates/stunnel/foreground.erb new file mode 100644 index 0000000..2ceff96 --- /dev/null +++ b/templates/stunnel/foreground.erb @@ -0,0 +1 @@ +foreground = <%= @foreground %> diff --git a/templates/stunnel/service.erb b/templates/stunnel/service.erb new file mode 100644 index 0000000..b707444 --- /dev/null +++ b/templates/stunnel/service.erb @@ -0,0 +1,6 @@ +[<%= @name %>] +client = <%= @client %> +accept=<%= @accept_host %>:<%= @accept_port %> +connect=<%= @connect_host %>:<%= @connect_port %> +cert=<%= @certificate %> +key=<%= @key %> -- cgit 1.2.3-korg