connections {
    andy {
        remote_addrs = 68.48.18.140
        vips = ::
        local1 {
            pubkeys = ssh_host_rsa_key.pub
            auth = pubkey
            id = dd6c:fbfd:eeb8:4709
        }
        remote1 {
            id = "68.48.18.140"
            pubkeys = andy.pub
            auth = pubkey
        }
        children {
            child1 {
                remote_ts = 0::0/0
                mode = tunnel
                dpd_action = restart
            }
        }
    }
}
secrets {
    private1 {
        file = ssh_host_rsa_key
    }
}