connections {
    ra-tech {
        pools = ra-tech-pool
        local {
            auth = pubkey
            certs = vps-crt.pem
            id = vps.ra-tech.dev
        }
        remote {
            auth = pubkey
        }
        children {
            ra-tech {
                local_ts = 0.0.0.0/0
            }
        }
        send_cert = always
	    if_id_in = 0x21
        if_id_out = 0x21
    }
    ra-tech-ip {
        pools = ra-tech-pool
        local {
            auth = pubkey
            certs = ip-vps-crt.pem
            id = {{ public_ip }}
        }
        remote {
            auth = pubkey
        }
        children {
            ra-tech-ip {
                local_ts = 0.0.0.0/0
            }
        }
        send_cert = always
	    if_id_in = 0x21
        if_id_out = 0x21
    }
    ra-tech-subnet {
        pools = ra-tech-pool
        local {
            auth = pubkey
            certs = vpn-subnet-crt.pem
            id = vpn-subnet.ra-tech.dev
        }
        remote {
            auth = pubkey
        }
        children {
            ra-tech-subnet {
                local_ts = 10.9.0.0/24
            }
        }
        send_cert = always
	    if_id_in = 0x21
        if_id_out = 0x21
    }
    ra-tech-odroid {
        pools = odroid-pool
        local {
            auth = pubkey
            certs = odroid-vps-crt.pem
            id = odroid-vps.ra-tech.dev
        }
        remote {
            auth = pubkey
            id = odroid@ra-tech.dev
        }
        children {
            ra-tech-odroid {
                local_ts = 0.0.0.0/0
            }
        }
	    if_id_in = 0x21
        if_id_out = 0x21
    }
}

pools {
    ra-tech-pool {
        addrs = 10.9.0.11 - 10.9.0.30
	    dns = 10.9.0.1
	    netmask = 255.255.255.0
    }

    odroid-pool {
        addrs = 10.9.0.10
        dns = 10.9.0.1
        netmask = 255.255.255.0
    }
}