Make role multiplatform
- On debian 11 strongswan daemon has different name
- Make config file backups when overwriting
- Add closeaction configuration option
- More metadata fixes
- Change tests to run standalone
Change-Id: I04474cb4601060059c4e603560d1873ad6598a77
diff --git a/defaults/main.yml b/defaults/main.yml
index 6ca42d9..ef5e6cf 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -32,11 +32,15 @@
strongswan_conf_auth_type: "psk"
# What operation should be done automatically at IPsec startup
-# Acceptable values are add, start, or route
+# Acceptable values: add, start, or route
strongswan_conf_auto: "route"
-strongswan_conf_dpdaction: "clear"
strongswan_conf_keyingtries: "3"
+# Actions that are taken when a connection drops
+# Acceptable values: clear, hold, restart
+strongswan_conf_dpdaction: "clear"
+strongswan_conf_closeaction: "clear"
+
# Whether rekeying of an IKE_SA should also reauthenticate the peer
strongswan_conf_reauth: "no"