7u83-ipsec/manifests/strongswan_params.pp

36 lines
830 B
Puppet

#
class ipsec::strongswan_params {
case $::osfamily {
'FreeBSD':{
$pkg_name = "strongswan"
$ipsec_conf = '/usr/local/etc/ipsec.conf'
$service_name = 'strongswan'
# strongswan's startup script confuses pupets
# service enable, so we cannot enable the service
$service_enable = undef
$secrets_usr = 'root'
$secrets_grp = 'wheel'
$secrets_file = '/usr/local/etc/ipsec.secrets'
}
'OpenBSD':{
$isakmpd_service = 'isakmpd'
$pkg_name = false
$pkg_provider = undef
$ipsec_conf = '/etc/ipsec.conf'
$setkey_cmd = '/sbin/ipsecctl -f /etc/ipsec.conf'
}
default: {
$pkg_name = "strongswan"
$ipsec_conf = '/etc/ipsec.conf'
$service_name = 'strongswan'
$service_enable = true
$secrets_usr = 'root'
$secrets_grp = 'root'
$secrets_file = '/etc/ipsec.secrets'
}
}
}