services.strongswan.connections

A set of connections and their options for the ‘conn xxx’ sections of the ipsec.conf file.

Type

attribute set of attribute set of string

Default

{ }

Example

{
  "%default" = {
    keyexchange = "ikev2";
    keyingtries = "1";
  };
  roadwarrior = {
    auto       = "add";
    leftcert   = "/run/keys/moonCert.pem";
    leftid     = "@moon.strongswan.org";
    leftsubnet = "10.1.0.0/16";
    right      = "%any";
  };
}

Declared

<nixpkgs/nixos/modules/services/networking/strongswan.nix>