roles/protonvpn: Set infinite keying retries

By default, strongSwan will only attempt key negotiation once and then give up. If the VPN connection is closed because of a network issue, it is unlikely that a single attempt to reconnect will work, so let's keep trying until it succeeds.
2020-10-10 11:10:12 -05:00 · 2020-10-10 11:10:12 -05:00 · 132689a3b8
parent 3a36d6b7ff
commit 132689a3b8
1 changed files with 1 additions and 0 deletions
--- a/roles/protonvpn/templates/protonvpn.conf.j2
+++ b/roles/protonvpn/templates/protonvpn.conf.j2
@ -11,6 +11,7 @@ connections {
            auth = pubkey
        }
        children {
+	    keyingtries = 0
            dpd_delay = 30s
            protonvpn {
                remote_ts = {{ protonvpn_tunnel }}