or would the proper way be:
Check the examples in the manpage: http://www.stunnel.org/faq/stunnel.html#header
Also, do all the global stunnel options (eg: verify, CAFile, cert amd key) apply to all services?
Yes.
Lastly, can I have two services forwarding to the same connect port?
Yep, no reason why not.
You can't have two services *listening* on the same accept port.
Jan