diff --git a/defaults/main.yml b/defaults/main.yml
index 5261e7a..617ebf6 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -31,6 +31,13 @@
 # NOTE: only psk is supported
 strongswan_conf_auth_type: "psk"
 
+# What operation should be done automatically at IPsec startup
+# Acceptable values are add, start, or route
+strongswan_conf_auto: "add"
+
+# Whether rekeying of an IKE_SA should also reauthenticate the peer
+strongswan_conf_reauth: "no"
+
 # Handle routes in strongSwan or not
 # Set no if VPNs are route based
 strongswan_conf_install_routes: false