newops/strongswan repository overview

$ git clone xxx strongswan
$ helm install --name opsvpn --namespace secure strongswan/
$ helm status opsvpn
$ helm delete opsvpn --purge

COPY conf/ipsec.conf /etc/ipsec.conf
COPY conf/ipsec.secrets /etc/ipsec.secrets

$ chmod 640 /etc/ipsec.d/cacerts/chain.pem
$ chmod 640 /etc/ipsec.d/certs/cert.pem
$ chmod 640 /etc/ipsec.d/private/privkey.pem

$ ipsec start --nofork

$ sysctl -w net.ipv4.ip_forward=1

$ iptables -t nat -A POSTROUTING -s 192.168.111.0/24 -o eth0 -j MASQUERADE