yum install firewalld -y
systemctl start firewalld
systemctl enable firewalld
firewall-cmd --permanent --zone=public --add-interface=eth0
sed "s/\"80\"/\"6379\"/;s/WWW (HTTP)/Redis/;/<description>.*/d" /usr/lib/firewalld/services/http.xml > /etc/firewalld/services/redis.xml
firewall-cmd --permanent --add-service=redis --zone=public
firewall-cmd --reload

yum install stunnel -y

cd /etc/pki/tls/certs
make stunnel.pem << EOF









EOF


useradd -r -m -d /var/run/stunnel -s /bin/nologin stunnel

cat > /etc/stunnel/stunnel.conf << EOF
cert = /etc/pki/tls/certs/stunnel.pem
; Allow only TLS, thus avoiding SSL
sslVersion = TLSv1
chroot = /var/run/stunnel
setuid = stunnel
setgid = stunnel
pid = /stunnel.pid
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1

[redis]
client = no
accept = 6379
connect = 6379
TIMEOUTclose = 0
EOF

cat > /etc/systemd/system/stunnel.service << EOF
[Unit]
Description=SSL tunnel
After=syslog.target

[Service]
ExecStart=/usr/bin/stunnel /etc/stunnel/stunnel.conf
ExecStop=/bin/kill -9
ExecStatus=pgrep stunnel
Type=forking

[Install]
WantedBy=multi-user.target
EOF

yum install redis -y

systemctl start redis
systemctl enable redis

systemctl start stunnel
systemctl enable stunnel