kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d8d66583f8eeafd568ea2b0269c9542052d45335
hunfabric/modules/cloud-config-container/__need_fixing/onprem/docker-images/strongswan/README.md
Ludovico Magnocavallo d2015b0bc3 Assorted module fixes (#1045) 
* net-ilb-l7 use both neg types in backends

* run example tests on cloud-config-container modules

* streamline nginx-tls cos module

* add tests for cos modules

* tfdoc

* onprem needs fixing, links

* disable test

* test
2022-12-10 15:40:15 +01:00

1002 B
Raw Blame History

StrongSwan docker container

Build

gcloud builds submit . --config=cloudbuild.yaml

Docker compose example

version: "3"
services:
  vpn:
    image: gcr.io/pso-cft-fabric/strongswan:latest
    networks:
      default:
        ipv4_address: 192.168.0.2
    cap_add:
      - NET_ADMIN
    ports:
      - "500:500/udp"
      - "4500:4500/udp"
      - "179:179/tcp"
    privileged: true
    volumes:
      - "/lib/modules:/lib/modules:ro"
      - "/etc/localtime:/etc/localtime:ro"
      - "/var/lib/docker-compose/onprem/ipsec/ipsec.conf:/etc/ipsec.conf:ro"
      - "/var/lib/docker-compose/onprem/ipsec/ipsec.secrets:/etc/ipsec.secrets:ro"
      - "/var/lib/docker-compose/onprem/ipsec/vti.conf:/etc/strongswan.d/vti.conf:ro"
  bird:
    image: pierky/bird
    network_mode: service:vpn
    cap_add:
      - NET_ADMIN
      - NET_BROADCAST
      - NET_RAW
    privileged: true
    volumes:
      - "/var/lib/docker-compose/onprem/bird/bird.conf:/etc/bird/bird.conf:ro"