summaryrefslogtreecommitdiff
path: root/vpn/strongswan.conf
diff options
context:
space:
mode:
authoryyamashita <yyamashita@hetzner.yyamashita.com>2026-06-30 22:29:07 +0900
committeryyamashita <yyamashita@hetzner.yyamashita.com>2026-06-30 22:29:07 +0900
commit58f7917662ff92a3712289acccff8310c8f1baff (patch)
treecf7290a3eaf0e08c170199ac831f562949785014 /vpn/strongswan.conf
parent1ad98cc2f9f8a5950aec998a6daacec381cbe2c4 (diff)
Add strongSwan IKEv2 VPN service
- vpn/: Dockerfile, docker-compose.yml, swanctl.conf.tpl, entrypoint.sh - install.sh: Caddy 証明書流用 + コンテナ起動 - renew-cert.sh: 証明書更新 + swanctl ホットリロード - caddy/Caddyfile: vpn.yyamashita.com 追加(Let's Encrypt 証明書取得用) - post-receive: vpn/deploy.sh を追加 - setup-route53.py: WEB_SUBDOMAINS に vpn を追加 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'vpn/strongswan.conf')
-rw-r--r--vpn/strongswan.conf15
1 files changed, 15 insertions, 0 deletions
diff --git a/vpn/strongswan.conf b/vpn/strongswan.conf
new file mode 100644
index 0000000..b42f8c0
--- /dev/null
+++ b/vpn/strongswan.conf
@@ -0,0 +1,15 @@
+charon {
+ load_modular = yes
+ plugins {
+ include strongswan.d/charon/*.conf
+ }
+ filelog {
+ stderr {
+ default = 1
+ ike = 2
+ knl = 3
+ }
+ }
+ send_vendor_id = no
+}
+include strongswan.d/*.conf