2016-07-11 21:51:31 +00:00
|
|
|
---
|
|
|
|
|
|
|
|
# IKEv2 currently supports only the following three curves:
|
|
|
|
# prime256v1
|
|
|
|
# secp384r1
|
|
|
|
# secp521r1
|
|
|
|
easyrsa_dir: /opt/easy-rsa-ipsec
|
|
|
|
easyrsa_curve: secp384r1
|
|
|
|
easyrsa_ca_expire: 3650
|
|
|
|
easyrsa_cert_expire: 3650
|
|
|
|
|
|
|
|
# if True re-init all existing certificates. Boolean
|
2016-07-12 07:20:08 +00:00
|
|
|
easyrsa_reinit_existent: True
|
2016-07-11 21:51:31 +00:00
|
|
|
|
|
|
|
# Domain or ip
|
2016-07-17 17:56:26 +00:00
|
|
|
server_name: www.ivlis.me
|
2016-07-12 07:00:46 +00:00
|
|
|
server_ip: "{{ ansible_ssh_host }}"
|
2016-07-11 21:51:31 +00:00
|
|
|
|
|
|
|
users:
|
|
|
|
- mr.smith
|
|
|
|
- mrs.smith
|