| Commit message (Collapse) | Author | Age | Files | |
|---|---|---|---|---|
| * | Don't require a PKI for IPSec. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | | | | | | | Instead, generate a server certificate for each host (on the machine itself). Then fetch all these certs locally, and copy them over to each IPSec peer. That requires more certs to be stored on each machines (n vs 2), but it can be done automatically, and is easier to deploy. Note: When adding a new machine to the inventory, one needs to run the playbook on that machine (to generate the cert and fetch it locally) first, then on all other machines. | |||
| * | Prefer maching on policy rather than marks. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | Also, use ESP tunnel mode instead of transport mode. | |||
| * | Configure IPSec. | Guilhem Moulin | 2015-06-07 | 1 |
 |
index : fripost-ansible | |
| Fripost ansible scripts |
| summaryrefslogtreecommitdiffstats |