# basic configuration
config setup
        charondebug="all"
        uniqueids=yes
        strictcrlpolicy=no

# connection to amsterdam datacenter
conn home-to-digitalocean
  authby=secret
  left=%defaultroute
  leftid=165.22.156.25
  leftsubnet=10.138.0.0/16
  right=0.0.0.0
  rightsubnet=192.168.1.0/24
  ike=aes256-sha2_256-modp1024!
  esp=aes256-sha2_256!
  keyingtries=0
  ikelifetime=1h
  lifetime=8h
  dpddelay=30
  dpdtimeout=120
  dpdaction=restart
  auto=start