From e969bb3822ed9f2861dc25fe4cbd1cbb83d803c8 Mon Sep 17 00:00:00 2001 From: varac Date: Sat, 10 Aug 2013 19:14:12 +0200 Subject: make ipsec.conf template configurable --- manifests/base.pp | 2 +- manifests/init.pp | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/manifests/base.pp b/manifests/base.pp index 6f28d12..ffdad02 100644 --- a/manifests/base.pp +++ b/manifests/base.pp @@ -44,7 +44,7 @@ class strongswan::base { "${strongswan::config_dir}/hosts/__dummy__.conf": ensure => 'present'; '/etc/ipsec.conf': - content => template('strongswan/ipsec.conf.erb'); + content => template($strongswan::ipsec_conf_template); "/usr/local/sbin/${binary_name}_connected_hosts": content => "#!/bin/bash\n${strongswan::binary} status | grep ESTABLISHED | awk -F\\[ '{ print \$1 }'\n", notify => undef, diff --git a/manifests/init.pp b/manifests/init.pp index e099166..162a136 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -8,7 +8,8 @@ class strongswan( $default_left_ip_address = $::ipaddress, $default_left_subnet = reject(split($::strongswan_ips,','),$::ipaddress), $additional_options = '', - $auto_remote_host = false + $auto_remote_host = false, + $ipsec_conf_template = 'strongswan/ipsec.conf.erb' ) { if $use_monkeysphere != false { -- cgit v1.2.3