Files
ansible-vps-setup/strongswan/ra-tech.conf.j2
T
2026-10-11 00:13:32 +03:00

93 lines
1.9 KiB
Django/Jinja

connections {
ra-tech {
pools = ra-tech-pool
local {
auth = pubkey
certs = vps-crt.pem
id = vps.ra-tech.dev
}
remote {
auth = pubkey
}
children {
ra-tech {
local_ts = 0.0.0.0/0
}
}
send_cert = always
if_id_in = 0x21
if_id_out = 0x21
}
ra-tech-ip {
pools = ra-tech-pool
local {
auth = pubkey
certs = ip-vps-crt.pem
id = {{ public_ip }}
}
remote {
auth = pubkey
}
children {
ra-tech-ip {
local_ts = 0.0.0.0/0
}
}
send_cert = always
if_id_in = 0x21
if_id_out = 0x21
}
ra-tech-subnet {
pools = ra-tech-pool
local {
auth = pubkey
certs = vpn-subnet-crt.pem
id = vpn-subnet.ra-tech.dev
}
remote {
auth = pubkey
}
children {
ra-tech-subnet {
local_ts = 10.9.0.0/24
}
}
send_cert = always
if_id_in = 0x21
if_id_out = 0x21
}
ra-tech-odroid {
pools = odroid-pool
local {
auth = pubkey
certs = odroid-vps-crt.pem
id = odroid-vps.ra-tech.dev
}
remote {
auth = pubkey
id = odroid@ra-tech.dev
}
children {
ra-tech-odroid {
local_ts = 0.0.0.0/0
}
}
if_id_in = 0x21
if_id_out = 0x21
}
}
pools {
ra-tech-pool {
addrs = 10.9.0.11 - 10.9.0.30
dns = 10.9.0.1
netmask = 255.255.255.0
}
odroid-pool {
addrs = 10.9.0.10
dns = 10.9.0.1
netmask = 255.255.255.0
}
}