16 lines
653 B
YAML
16 lines
653 B
YAML
- hosts: {% for router in session.service.routers %}
|
|
{{ router }}{% endfor %}
|
|
|
|
roles:
|
|
- role: certidude
|
|
authority_name: {{ session.authority.hostname }}
|
|
|
|
- role: ipsec_mesh
|
|
mesh_name: mymesh
|
|
authority_name: {{ session.authority.hostname }}
|
|
ike: aes256-sha384-{% if session.authority.certificate.algorithm == "ec" %}ecp384{% else %}modp2048{% endif %}!
|
|
esp: aes128gcm16-aes128gmac-{% if session.authority.certificate.algorithm == "ec" %}ecp384{% else %}modp2048{% endif %}!
|
|
auto: start
|
|
nodes:{% for router in session.service.routers %}
|
|
{{ router }}: 172.27.{{ loop.index }}.0/24{% endfor %}
|