From 58f7917662ff92a3712289acccff8310c8f1baff Mon Sep 17 00:00:00 2001
From: yyamashita <yyamashita@hetzner.yyamashita.com>
Date: Tue, 30 Jun 2026 22:29:07 +0900
Subject: Add strongSwan IKEv2 VPN service
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- vpn/: Dockerfile, docker-compose.yml, swanctl.conf.tpl, entrypoint.sh
- install.sh: Caddy 証明書流用 + コンテナ起動
- renew-cert.sh: 証明書更新 + swanctl ホットリロード
- caddy/Caddyfile: vpn.yyamashita.com 追加（Let's Encrypt 証明書取得用）
- post-receive: vpn/deploy.sh を追加
- setup-route53.py: WEB_SUBDOMAINS に vpn を追加

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 vpn/strongswan.conf | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 vpn/strongswan.conf

(limited to 'vpn/strongswan.conf')

diff --git a/vpn/strongswan.conf b/vpn/strongswan.conf
new file mode 100644
index 0000000..b42f8c0
--- /dev/null
+++ b/vpn/strongswan.conf
@@ -0,0 +1,15 @@
+charon {
+    load_modular = yes
+    plugins {
+        include strongswan.d/charon/*.conf
+    }
+    filelog {
+        stderr {
+            default = 1
+            ike = 2
+            knl = 3
+        }
+    }
+    send_vendor_id = no
+}
+include strongswan.d/*.conf
-- 
cgit v1.2.3