gistfile1.txt

  vars:
    vpn_connections:
      - auth_method: psk
        auto: start
        # these common parameters are applied to the config of all hosts
        shared_key_content: secure_vault_key
        ike: aes256;sha512
        esp: aes256;sha512
        ikelifetime: 10h
        salifetime: 8h
        hosts:
          this_host:
            leftid: idoftheclient
          nfsserver:
            hostname: nfsserver.example.com
            rightid: idoftheserver