manifests/centos/six.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

# strongswan on centos six
class strongswan::centos::six inherits strongswan::base {
  Service['ipsec']{
    name => 'strongswan',
  }
  File['/etc/ipsec.secrets']{
    path => '/etc/strongswan/ipsec.secrets'
  }
  File['/etc/ipsec.conf']{
    path => '/etc/strongswan/ipsec.conf'
  }

  file{ [ '/etc/strongswan/ipsec.d',
          '/etc/strongswan/ipsec.d/private',
          '/etc/strongswan/ipsec.d/certs' ]:
    ensure  => directory,
    require => Package['strongswan'],
    before  => Exec['ipsec_privatekey'],
    owner   => root,
    group   => 0,
    mode    => '0600';
  }

  file{'/etc/sysconfig/strongswan':
    content => "config='/etc/strongswan/strongswan.conf'\n",
    notify  => Service['ipsec'],
    owner   => 'root',
    group   => 0,
    mode    => 0644;
  }
}