#
#
#

bundle agent strongswan
{
vars:
	freebsd::
		"pkgs" slist => {
			"strongswan"
		};
		"ipsec_conf" string => "/usr/local/etc/ipsec.conf";
		"ipsec_secrets" string => "/usr/local/etc/ipsec.secrets";
		"service_name" string => "strongswan";

	debian::
		"pkgs" slist => {
			"strongswan"
		};
		"ipsec_conf" string => "/etc/ipsec.conf";
		"ipsec_secrets" string => "/etc/ipsec.secrets";
		"service_name" string => "ipsec";

	centos::
		"pkgs" slist => {
			"strongswan"
		};
		"ipsec_conf" string => "/etc/strongswan/ipsec.conf";
		"ipsec_secrets" string => "/etc/strongswan/ipsec.secrets";
		"service_name" string => "strongswan-starter";


}


bundle agent install_strongswan(cfg)
{
vars:
	"service_deps" slist => { "strongswan_ipsec_conf_ready", "strongswan_ipsec_secrets_ready" };
	freebsd::
		"service_deps" slist => { "strongswan_ipsec_conf_ready", "strongswan_ipsec_secrets_ready","strongswan_bsdcfg_ready" };


methods:
	"any" usebundle => install_system_repos, handle => "system_repos_installed";
	"any" usebundle => wmde_install_packages(@(strongswan.pkgs),"strongswan"),
		depends_on => {"system_repos_installed"};
	"any" usebundle => wmde_service("$(strongswan.service_name)","strongswan_kept","strongswan_repaired"),
		depends_on => @(service_deps);
files:
	"$(strongswan.ipsec_conf)"
	create => "true",
	template_method => "mustache",
	template_data => bundlestate("$(this.bundle)"),
	depends_on => {"strongswan_pkgs_installed"},
	handle => "strongswan_ipsec_conf_ready",
	classes => if_repaired("strongswan_repaired"),
	edit_template => "$(sys.workdir)/inputs/$(def.wmde_libdir)/templates/strongswan-ipsec.conf.mustache";

	"$(strongswan.ipsec_secrets)"
	create => "true",
	template_method => "mustache",
	template_data => bundlestate("$(this.bundle)"),
	depends_on => {"strongswan_pkgs_installed"},
	handle => "strongswan_ipsec_secrets_ready",
	classes => if_repaired("strongswan_repaired"),
	edit_template => "$(sys.workdir)/inputs/$(def.wmde_libdir)/templates/strongswan-ipsec.secrets.mustache";

	freebsd::
	"/etc/rc.conf.d/strongswan"
	create => "true",
	content =>"strongswan_interface=stroke
strongswan_enable=\"YES\"
",
	handle => "strongswan_bsdcfg_ready";

reports:
	
}