wmdeit-cf-wmdelib/strongswan.cf

80 lines
2.1 KiB
CFEngine3
Raw Normal View History

2023-10-26 22:17:31 +00:00
#
#
#
bundle agent strongswan
{
vars:
freebsd::
"pkgs" slist => {
"strongswan"
};
"ipsec_conf" string => "/usr/local/etc/ipsec.conf";
"ipsec_secrets" string => "/usr/local/etc/ipsec.secrets";
"service_name" string => "strongswan";
debian::
"pkgs" slist => {
"strongswan"
};
"ipsec_conf" string => "/etc/ipsec.conf";
"ipsec_secrets" string => "/etc/ipsec.secrets";
"service_name" string => "ipsec";
centos::
"pkgs" slist => {
"strongswan"
};
"ipsec_conf" string => "/etc/strongswan/ipsec.conf";
"ipsec_secrets" string => "/etc/strongswan/ipsec.secrets";
"service_name" string => "strongswan-starter";
2023-10-26 22:17:31 +00:00
}
bundle agent install_strongswan(cfg)
{
vars:
"service_deps" slist => { "strongswan_ipsec_conf_ready", "strongswan_ipsec_secrets_ready" };
freebsd::
"service_deps" slist => { "strongswan_ipsec_conf_ready", "strongswan_ipsec_secrets_ready","strongswan_bsdcfg_ready" };
2023-10-26 22:17:31 +00:00
methods:
2023-10-31 16:21:51 +00:00
"any" usebundle => install_system_repos, handle => "system_repos_installed";
2023-10-27 19:32:41 +00:00
"any" usebundle => wmde_install_packages(@(strongswan.pkgs),"strongswan"),
2023-10-31 16:21:51 +00:00
depends_on => {"system_repos_installed"};
2023-10-26 22:17:31 +00:00
"any" usebundle => wmde_service("$(strongswan.service_name)","strongswan_kept","strongswan_repaired"),
depends_on => @(service_deps);
2023-10-26 22:17:31 +00:00
files:
"$(strongswan.ipsec_conf)"
create => "true",
template_method => "mustache",
template_data => bundlestate("$(this.bundle)"),
depends_on => {"strongswan_pkgs_installed"},
handle => "strongswan_ipsec_conf_ready",
classes => if_repaired("strongswan_repaired"),
edit_template => "$(sys.workdir)/inputs/$(def.wmde_libdir)/templates/strongswan-ipsec.conf.mustache";
"$(strongswan.ipsec_secrets)"
create => "true",
template_method => "mustache",
template_data => bundlestate("$(this.bundle)"),
depends_on => {"strongswan_pkgs_installed"},
handle => "strongswan_ipsec_secrets_ready",
classes => if_repaired("strongswan_repaired"),
edit_template => "$(sys.workdir)/inputs/$(def.wmde_libdir)/templates/strongswan-ipsec.secrets.mustache";
freebsd::
"/etc/rc.conf.d/strongswan"
create => "true",
content =>"strongswan_interface=stroke
strongswan_enable=\"YES\"
",
handle => "strongswan_bsdcfg_ready";
2023-10-26 22:17:31 +00:00
reports:
2023-10-26 22:17:31 +00:00
}