## stunnel.conf
foreground = yes
[pantheon]

protocol = pgsql
accept = 0.0.0.0:5435
connect = pantheon:5431
retry = yes
CAfile = /rootcert/ca.crt
cert = /cert/tls.crt
key = /cert/tls.key
verifyChain = no
verifyPeer = no