From 7641a5d5d152db349082b1d0ec93a40888b2ef8e Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Thu, 23 Jan 2020 04:29:12 +0100
Subject: Convert firewall to nftables.

Debian Buster uses the nftables framework by default.
---
 roles/common/templates/etc/ipsec.conf.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'roles/common/templates/etc/ipsec.conf.j2')

diff --git a/roles/common/templates/etc/ipsec.conf.j2 b/roles/common/templates/etc/ipsec.conf.j2
index 0ff9fbb..6b3840f 100644
--- a/roles/common/templates/etc/ipsec.conf.j2
+++ b/roles/common/templates/etc/ipsec.conf.j2
@@ -20,7 +20,7 @@ conn %default
     leftsubnet     = {{ ipsec[inventory_hostname_short] | ipv4 }}/32
     leftid         = {{ inventory_hostname }}
     leftsigkey     = {{ inventory_hostname_short }}.pem
-    leftfirewall   = yes
+    leftfirewall   = no
     lefthostaccess = yes
     rightauth      = pubkey
     auto           = route
-- 
cgit v1.2.3