ipsec_start

#!/bin/bash

# Traps are to handle if we are waiting on pipework
trap int INT
int() {
  echo "Caught INT, exiting"
  exit 255
}
trap term TERM
term(){
  echo "Gracefully shutting down"
  exit 0
}

pid=/var/run/starter.charon.pid
if [ -f $pid ]; then
  rm $pid
fi

: ${IPSEC_DEFAULT_PSK_LENGTH=32}

if [ ! -f /etc/ipsec.secrets ]; then
  ln -s /etc/ipsec.d/ipsec.secrets /etc/ipsec.secrets
fi

if [ -d /etc/ipsec.d/strongswan.d ]; then
	if [ -L /etc/strongswan.d ]; then
		rm /etc/strongswan.d
	fi
	ln -s /etc/ipsec.d/strongswan.d /etc/strongswan.d
fi

WAIT_INT=$1

if [ ! -z $WAIT_INT ]; then
  echo "Waiting for pipework"
  pipework --wait $WAIT_INT
fi

sysctl -w net.ipv4.conf.all.rp_filter=2

iptables --table nat --append POSTROUTING --jump MASQUERADE
echo 1 > /proc/sys/net/ipv4/ip_forward
for each in /proc/sys/net/ipv4/conf/*
do
	echo 0 > $each/accept_redirects
	echo 0 > $each/send_redirects
done

exec /usr/libexec/ipsec/starter --nofork