make ipsec.conf template configurable