diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2020-05-16 02:52:55 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2020-05-16 05:45:59 +0200 |
| commit | bac7811d2b35252b7a83a45d75bb344b4b1776a9 (patch) | |
| tree | 02176a15d570cab6dbd55b52b6df5c7b7b0538b1 /roles/common/tasks/ipsec.yml | |
| parent | c4f24043baeccc95556fb9c3c032505ecadb5fbd (diff) | |
Upgrade baseline to Debian 10.
Diffstat (limited to 'roles/common/tasks/ipsec.yml')
| -rw-r--r-- | roles/common/tasks/ipsec.yml | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/roles/common/tasks/ipsec.yml b/roles/common/tasks/ipsec.yml index 989541b..30bb481 100644 --- a/roles/common/tasks/ipsec.yml +++ b/roles/common/tasks/ipsec.yml @@ -1,38 +1,36 @@ - name: Install strongSwan apt: pkg={{ packages }} vars: packages: - strongswan-charon # for the GCM and openssl plugins - libstrongswan-standard-plugins notify: - Update firewall - Restart IPsec - name: Auto-create a dedicated virtual subnet for IPsec template: src=etc/network/if-up.d/ipsec.j2 dest=/etc/network/if-up.d/ipsec owner=root group=root mode=0755 - notify: - - Reload networking - name: Auto-deactivate the dedicated virtual subnet for IPsec file: src=../if-up.d/ipsec dest=/etc/network/if-down.d/ipsec owner=root group=root state=link force=yes - meta: flush_handlers - name: Configure IPsec template: src=etc/ipsec.conf.j2 dest=/etc/ipsec.conf owner=root group=root mode=0644 register: r1 notify: - Restart IPsec - name: Configure IPsec's secrets template: src=etc/ipsec.secrets.j2 |