(register-services
 (make <service>
   #:docstring "SSH tunnel to ingrid CMK server for socket"
   #:provides '(ingrid-cmk)
   #:start (make-forkexec-constructor
            (list "ssh" "-NTv"
                  "-o" "ServerAliveInterval=60"
                  "-o" "ExitOnForwardFailure=yes"
                  "-o" "StreamLocalBindUnlink=yes"
                  "-L" "/tmp/ingridcmk.socket:/omd/sites/ingrid/tmp/run/live"
                  "ingrid@ingrid")
            #:log-file "/tmp/ingrid-cmk.log"
            #:environment-variables '("SSH_AUTH_SOCK=/run/user/1000/gnupg/S.gpg-agent.ssh"))
   #:stop (make-kill-destructor 2) ;; 2 is SIGINT - interupt process stream, ctrl-C
   #:respawn? #t))