# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup
        plutodebug=none
        uniqueids=yes
        nat_traversal=yes
        interfaces="%defaultroute"

# Add connections here.

conn %default
        authby=rsasig
        leftrsasigkey=%cert
        rightrsasigkey=%cert
        keyingtries=1
        keylife=20m
        ikelifetime=240m

conn bitbytecorevpn
        left=%defaultroute
        leftcert=/etc/certs/vpn.cert
        leftsubnet=10.10.10.0/24
        leftfirewall=yes
        right=%any
        rightsubnet=0.0.0.0/0
                auto=add

include /var/lib/strongswan/ipsec.conf.inc