"Here's this super cool ansible script to set up an ipsec vpn!"

Hidden in a github issue somewhere

"Oh, by the way, it sets up a version of the OS that doesn't play nice with ipsec vpns for no readily apparent reason, you'll want to change that"