mirror of
https://github.com/trailofbits/algo.git
synced 2025-09-29 23:25:18 +02:00
e8947f318b
* Refactoring, booleans declaration and update users fix * Make server_name more FQDN compatible * Rename variables * Define the default value for store_cakey * Skip a prompt about the SSH user if deploying to localhost * Disable reboot for non-cloud deployments * Enable EC2 volume encryption by default * Add default server value (localhost) for the local installation Delete empty files * Add default region to aws_region_facts * Update docs * EC2 credentials fix * Warnings fix * Update deploy-from-ansible.md * Fix a typo * Remove lightsail from the docs * Disable EC2 encryption by default * rename droplet to server * Disable dependencies * Disable tls_cipher_suite * Convert wifi-exclude to a string. Update-users fix * SSH access congrats fix * 16.04 > 18.04 * Dont ask for the credentials if specified in the environment vars * GCE server name fix
28 lines
583 B
Django/Jinja
28 lines
583 B
Django/Jinja
conn ikev2-{{ IP_subject_alt_name }}
|
|
fragmentation=yes
|
|
rekey=no
|
|
dpdaction=clear
|
|
keyexchange=ikev2
|
|
compress=no
|
|
dpddelay=35s
|
|
|
|
{% if algo_windows %}
|
|
ike={{ ciphers.compat.ike }}
|
|
esp={{ ciphers.compat.esp }}
|
|
{% else %}
|
|
ike={{ ciphers.defaults.ike }}
|
|
esp={{ ciphers.defaults.esp }}
|
|
{% endif %}
|
|
|
|
right={{ IP_subject_alt_name }}
|
|
rightid={{ IP_subject_alt_name }}
|
|
rightsubnet=0.0.0.0/0
|
|
rightauth=pubkey
|
|
|
|
leftsourceip=%config
|
|
leftauth=pubkey
|
|
leftcert={{ item }}.crt
|
|
leftfirewall=yes
|
|
left=%defaultroute
|
|
|
|
auto=add
|