From: Peter Palfrader <peter@palfrader.org>
Date: Fri, 12 Apr 2019 12:46:12 +0000 (+0200)
Subject: ipsec: replace auto=start/closeaction=restart with just auto=route to avoid restart... 
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=aed06e938ff81e2e0c2bdf16357d7da03a04f627;hp=3dd1d7496f5d3feaff05611b703e90851e12e089;p=mirror%2Fdsa-puppet.git

ipsec: replace auto=start/closeaction=restart with just auto=route to avoid restart loops
---

diff --git a/modules/ipsec/templates/ipsec.conf-10-puppet-peers.conf.erb b/modules/ipsec/templates/ipsec.conf-10-puppet-peers.conf.erb
index bde49ce56..43a234594 100644
--- a/modules/ipsec/templates/ipsec.conf-10-puppet-peers.conf.erb
+++ b/modules/ipsec/templates/ipsec.conf-10-puppet-peers.conf.erb
@@ -38,8 +38,9 @@ config.keys.each do |host|
     lines << "  type = transport"
   end
   lines << ""
-  lines << "  auto=start"
-  lines << "  closeaction=restart"
+  lines << "  #auto=start"
+  lines << "  #closeaction=restart"
+  lines << "  auto=route"
   lines << ""
 end
 lines.join("\n")