strongswan_default_config:
  attr:
    load: yes
    dns: "{%- if strongswan_dns_ip is defined -%}\
            {{ strongswan_dns_ip }}\
          {%- elif strongswan_dns_hostname is defined -%}\
            {{ hostvars[strongswan_dns_hostname]['ansible_host'] }}\
          {%- elif services.filtering_ns is defined -%}\
            {{ hostvars[services.filtering_ns.hostname]['ansible_host'] }}\
          {%- endif -%}"