From 59f913cc1efa21bd8df1a395d4d20f0b451965c2 Mon Sep 17 00:00:00 2001
From: Trygve Laugstøl <trygvis@inamo.no>
Date: Sun, 25 Oct 2020 19:11:13 +0100
Subject: o Removing experiments.

---
 .../experiments/strongswan/strongswan-server.yml   | 67 ----------------------
 1 file changed, 67 deletions(-)
 delete mode 100644 ansible/experiments/strongswan/strongswan-server.yml

(limited to 'ansible/experiments/strongswan/strongswan-server.yml')

diff --git a/ansible/experiments/strongswan/strongswan-server.yml b/ansible/experiments/strongswan/strongswan-server.yml
deleted file mode 100644
index e555b90..0000000
--- a/ansible/experiments/strongswan/strongswan-server.yml
+++ /dev/null
@@ -1,67 +0,0 @@
-- hosts:
-  - knot
-  vars_files:
-    - strongswan-vars.yml
-  vars:
-    peers:
-      - arius
-  handlers:
-    - name: systemctl restart strongswan
-      become: true
-      systemd:
-        name: strongswan
-        state: restarted
-  tasks:
-    - become: true
-      block:
-        - name: packages
-          apt:
-            name: "{{ item }}"
-            install_recommends: no
-          with_items:
-            - strongswan-swanctl
-        - name: install certs
-          with_items: "{{ peers }}"
-          copy:
-            src=swanctl/{{ item }}/rsa/{{ item }}-key.der
-            dest=/etc/swanctl/rsa/{{ item }}-key.der
-        - name: install swanctl.conf
-          notify: systemctl restart strongswan
-          copy:
-            dest: /etc/swanctl/conf.d/trygvis.io.conf
-            content: |
-              connections {
-
-                 rw {
-                    local_addrs  = fec0::1
-
-                    local {
-                       auth = pubkey
-                       certs = moonCert.pem
-                       id = moon.strongswan.org
-                    }
-                    remote {
-                       auth = pubkey
-                    }
-                    children {
-                       net {
-                          local_ts  = {{ strongswan_ts }}
-
-                          updown = /usr/local/libexec/ipsec/_updown iptables
-                          esp_proposals = aes128-sha256-x25519
-                       }
-                    }
-                    version = 2
-                    proposals = aes128-sha256-x25519
-                 }
-              }
-
-              authorities {
-                 strongswan {
-                    #cacert = caCert.pem
-                    #crl_uris = http://ip6-winnetou.strongswan.org/strongswan.crl
-                    cacert = ca-cert.der
-                    crl_uris =
-                 }
-              }
-
-- 
cgit v1.2.3