Mine

# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup
        # plutodebug=all
        # crlcheckinterval=600
        # strictcrlpolicy=yes
        # cachecrls=yes
        nat_traversal=yes
        charonstart=no
        plutostart=yes

# Add connections here.

conn hol
        left=%defaultroute
        leftcert=pianuxCert.crt
        right=hol.tsalikis.net
        rightcert=roosterCertIPsec.crt
        auto=start