feat: first commit

strongswan/charon/dhcp.conf.j2

@@ -0,0 +1,6 @@
+dhcp {
+        load = yes
+        force_server_address = yes
+        server = 10.9.0.255
+        interface = {{ public_ip_iface }}
+}

strongswan/iface-ra0-up.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+set +e
+
+echo "Confiugring ra0 network interface at $(date)"
+
+ip link add ra0 type xfrm if_id 0x21
+ip link set ra0 up
+ip addr add 10.9.0.1/24 brd + dev ra0
+ip route add 10.9.0.0/24 dev ra0
+
+set -e
+
+exit 0

strongswan/iface-ra0.service

@@ -0,0 +1,11 @@
+[Unit]
+Description=Configure ra0 interface on startup
+After=network.target
+
+[Service]
+ExecStart=/usr/local/bin/iface-ra0-up.sh
+Type=oneshot
+RemainAfterExit=yes
+
+[Install]
+WantedBy=multi-user.target

strongswan/ra-tech.conf.j2

@@ -0,0 +1,92 @@
+connections {
+    ra-tech {
+        pools = ra-tech-pool
+        local {
+            auth = pubkey
+            certs = vps-crt.pem
+            id = vps.ra-tech.dev
+        }
+        remote {
+            auth = pubkey
+        }
+        children {
+            ra-tech {
+                local_ts = 0.0.0.0/0
+            }
+        }
+        send_cert = always
+	    if_id_in = 0x21
+        if_id_out = 0x21
+    }
+    ra-tech-ip {
+        pools = ra-tech-pool
+        local {
+            auth = pubkey
+            certs = ip-vps-crt.pem
+            id = {{ public_ip }}
+        }
+        remote {
+            auth = pubkey
+        }
+        children {
+            ra-tech-ip {
+                local_ts = 0.0.0.0/0
+            }
+        }
+        send_cert = always
+	    if_id_in = 0x21
+        if_id_out = 0x21
+    }
+    ra-tech-subnet {
+        pools = ra-tech-pool
+        local {
+            auth = pubkey
+            certs = vpn-subnet-crt.pem
+            id = vpn-subnet.ra-tech.dev
+        }
+        remote {
+            auth = pubkey
+        }
+        children {
+            ra-tech-subnet {
+                local_ts = 10.9.0.0/24
+            }
+        }
+        send_cert = always
+	    if_id_in = 0x21
+        if_id_out = 0x21
+    }
+    ra-tech-odroid {
+        pools = odroid-pool
+        local {
+            auth = pubkey
+            certs = odroid-vps-crt.pem
+            id = odroid-vps.ra-tech.dev
+        }
+        remote {
+            auth = pubkey
+            id = odroid@ra-tech.dev
+        }
+        children {
+            ra-tech-odroid {
+                local_ts = 0.0.0.0/0
+            }
+        }
+	    if_id_in = 0x21
+        if_id_out = 0x21
+    }
+}
+
+pools {
+    ra-tech-pool {
+        addrs = 10.9.0.11 - 10.9.0.30
+	    dns = 10.9.0.1
+	    netmask = 255.255.255.0
+    }
+
+    odroid-pool {
+        addrs = 10.9.0.10
+        dns = 10.9.0.1
+        netmask = 255.255.255.0
+    }
+}