ipsec.conf:

config setup

conn %default
	ikelifetime=60m
	keylife=20m
	rekeymargin=3m
	keyingtries=1
	keyexchange=ikev1
	authby=secret

conn home
	left=10.10.14.29 # Our IP.
	leftfirewall=yes
	right=10.10.10.116 # The Conceal host IP.
	rightsubnet=10.10.0.0/16 # Internal network on Conceal with subnet mask.
	auto=add
	xauth_identity="Destitute"


ipsec.secrets:

10.10.10.116 : PSK Dudecake1!