diff --git a/algo b/algo
index d82bad8..3364e7e 100755
--- a/algo
+++ b/algo
@@ -7,13 +7,13 @@ SKIP_TAGS="_null encrypted"
additional_roles () {
read -p "
-Do you want to enable VPN Always-On when connected to cellular networks?
+Do you want to enable VPN On Demand when connected to cellular networks?
[y/N]: " -r OnDemandEnabled_Cellular
OnDemandEnabled_Cellular=${OnDemandEnabled_Cellular:-n}
if [[ "$OnDemandEnabled_Cellular" =~ ^(y|Y)$ ]]; then EXTRA_VARS+=" OnDemandEnabled_Cellular=Y"; fi
read -p "
-Do you want to enable VPN Always-On when connected to Wi-Fi?
+Do you want to enable VPN On Demand when connected to Wi-Fi?
[y/N]: " -r OnDemandEnabled_WIFI
OnDemandEnabled_WIFI=${OnDemandEnabled_WIFI:-n}
if [[ "$OnDemandEnabled_WIFI" =~ ^(y|Y)$ ]]; then EXTRA_VARS+=" OnDemandEnabled_WIFI=Y"; fi
diff --git a/roles/vpn/templates/mobileconfig.j2 b/roles/vpn/templates/mobileconfig.j2
index 9ee20c4..c48bc1b 100644
--- a/roles/vpn/templates/mobileconfig.j2
+++ b/roles/vpn/templates/mobileconfig.j2
@@ -62,14 +62,14 @@
IntegrityAlgorithm
SHA2-256
LifeTimeInMinutes
- 1440
+ 20
DeadPeerDetectionRate
Medium
DisableMOBIKE
0
DisableRedirect
- 0
+ 1
EnableCertificateRevocationCheck
0
EnablePFS
@@ -83,7 +83,7 @@
IntegrityAlgorithm
SHA2-256
LifeTimeInMinutes
- 1440
+ 20
LocalIdentifier
{{ item.0 }}
@@ -96,7 +96,7 @@
ECDSA256
{% endif %}
ServerCertificateIssuerCommonName
- {{ IP_subject_alt_name }}
+ {{ IP_subject_alt_name }}
RemoteAddress
{{ IP_subject_alt_name }}
RemoteIdentifier