I think it's time to integrate it into some real devel project and my guess is that the "security" project fits most. An integration into the SuSEFirewall2 would be nice, but I could not manage to get it done - maybe others can do this once they notice that the package is available... OBS-URL: https://build.opensuse.org/request/show/184401 OBS-URL: https://build.opensuse.org/package/show/security/sslh?expand=0&rev=1
75 lines
1.7 KiB
Plaintext
75 lines
1.7 KiB
Plaintext
## Path: Network/Remote access/SSLH
|
|
## Description: SSLH server settings
|
|
## Type: integer
|
|
## Default: 2
|
|
## ServiceRestart: sslh
|
|
#
|
|
# Timeout before a connection is considered to be SSH.
|
|
# Default is 2s.
|
|
#
|
|
TIMEOUT=2
|
|
|
|
## Type: string
|
|
## Default: "0.0.0.0:443"
|
|
#
|
|
# Interface and port on which to listen, e.g. foobar:443, where foobar
|
|
# is the name of an interface (typically the IP address on which the
|
|
# Internet connection ends up).
|
|
#
|
|
# Defaults to 0.0.0.0:443 (listen to port 443 on all available interfaces).
|
|
#
|
|
LISTENING_ADDRESS="0.0.0.0:443"
|
|
|
|
## Type: string
|
|
## Default: "localhost:443"
|
|
#
|
|
# Interface and port on which to forward SSL connection,
|
|
# typically localhost:443.
|
|
#
|
|
# Defaults to localhost:443 (this assumes you would configure your
|
|
# httpd process to listen to port 443).
|
|
#
|
|
# Note that you can set sslh to listen on ext_ip:443 and httpd to
|
|
# listen on localhost:443: this allows clients inside your network
|
|
# to just connect directly to httpd.
|
|
#
|
|
TARGET_ADDRESS_FOR_SSL="localhost:443"
|
|
|
|
## Type: string
|
|
## Default: "localhost:22"
|
|
#
|
|
# Interface and port on which to forward SSH connection,
|
|
# defaults to localhost:22.
|
|
#
|
|
TARGET_ADDRESS_FOR_SSH="localhost:22"
|
|
|
|
## Type: string
|
|
## Default: "localhost:1194"
|
|
#
|
|
# Interface and port on which to forward openVPN connection,
|
|
# defaults to localhost:1194.
|
|
#
|
|
TARGET_ADDRESS_FOR_OPENVPN="localhost:1194"
|
|
|
|
## Type: yesno
|
|
## Default: no
|
|
#
|
|
# Increase verboseness.
|
|
#
|
|
BE_VERBOSE="no"
|
|
|
|
## Type: string
|
|
## Default: "sslh"
|
|
#
|
|
# Requires to run under the specified username.
|
|
#
|
|
USERNAME="sslh"
|
|
|
|
## Type: string
|
|
## Default: ""
|
|
#
|
|
# Other options to pass to the sslh daemon during startup.
|
|
# Please read "man 8 sslh" for details.
|
|
#
|
|
SSLH_OPTS=""
|