From 6710d35e2935b6a48ca8f047dea9909b0f96a9da Mon Sep 17 00:00:00 2001
From: Mathieu <mbaudier@argeo.org>
Date: Mon, 6 Mar 2023 09:29:40 +0100
Subject: [PATCH] IPSec systemd units

---
 .../system/freed-ipsec-roaming@.service       | 27 +++++++++++++++++++
 usr/lib/systemd/system/freed-onresume.service | 14 ++++++++++
 .../systemd/system/freed-onsuspend.service    | 11 ++++++++
 3 files changed, 52 insertions(+)
 create mode 100644 usr/lib/systemd/system/freed-ipsec-roaming@.service
 create mode 100644 usr/lib/systemd/system/freed-onresume.service
 create mode 100644 usr/lib/systemd/system/freed-onsuspend.service

diff --git a/usr/lib/systemd/system/freed-ipsec-roaming@.service b/usr/lib/systemd/system/freed-ipsec-roaming@.service
new file mode 100644
index 0000000..374004b
--- /dev/null
+++ b/usr/lib/systemd/system/freed-ipsec-roaming@.service
@@ -0,0 +1,27 @@
+[Unit]
+Description=Roaming IPSec to '%i'
+After=network-online.target
+Wants=network-online.target
+
+After=unbound.service
+Requires=unbound.service
+
+After=ipsec.service
+PartOf=ipsec.service
+Requires=ipsec.service
+
+StartLimitIntervalSec=60
+StartLimitBurst=20
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=ipsec auto --start %i
+ExecStop=ipsec auto --delete %i
+
+Restart=on-failure
+RestartSec=3
+
+[Install]
+WantedBy=multi-user.target
+RequiredBy=ipsec.service
diff --git a/usr/lib/systemd/system/freed-onresume.service b/usr/lib/systemd/system/freed-onresume.service
new file mode 100644
index 0000000..7b7dc54
--- /dev/null
+++ b/usr/lib/systemd/system/freed-onresume.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=On resume actions
+After=sleep.target
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStartPre=sleep 3
+ExecStart=/usr/bin/systemctl restart ipsec
+
+[Install]
+WantedBy=sleep.target
+
diff --git a/usr/lib/systemd/system/freed-onsuspend.service b/usr/lib/systemd/system/freed-onsuspend.service
new file mode 100644
index 0000000..47afcc2
--- /dev/null
+++ b/usr/lib/systemd/system/freed-onsuspend.service
@@ -0,0 +1,11 @@
+[Unit]
+Description=On suspend actions
+Before=sleep.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/bin/systemctl stop ipsec
+ExecStartPost=/usr/bin/sleep 5
+
+[Install]
+WantedBy=sleep.target
-- 
2.30.2