---
__vpn_packages:
  - iproute  # for default_ipvX facts
  - libreswan

__vpn_services:
  - ipsec

__vpn_ikev2: 'insist'

__vpn_nss_location: '/var/lib/ipsec/nss'
#
# ansible_facts required by the role
__vpn_required_facts:
  - default_ipv4
  - default_ipv6
  - distribution
  - distribution_major_version
  - distribution_version
  - os_family

# the subsets of ansible_facts that need to be gathered in case any of the
# facts in required_facts is missing; see the documentation of
# the 'gather_subset' parameter of the 'setup' module
__vpn_required_facts_subsets: "{{ ['!all', '!min'] + __vpn_required_facts }}"

# BEGIN - DO NOT EDIT THIS BLOCK - rh distros variables
# Ansible distribution identifiers that the role treats like RHEL
__vpn_rh_distros:
  - AlmaLinux
  - CentOS
  - RedHat
  - Rocky

# Same as above but includes Fedora
__vpn_rh_distros_fedora: "{{ __vpn_rh_distros + ['Fedora'] }}"

# Use this in conditionals to check if distro is Red Hat or clone
__vpn_is_rh_distro: "{{ ansible_distribution in __vpn_rh_distros }}"

# Use this in conditionals to check if distro is Red Hat or clone, or Fedora
__vpn_is_rh_distro_fedora: "{{ ansible_distribution in __vpn_rh_distros_fedora }}"
# END - DO NOT EDIT THIS BLOCK - rh distros variables
