You only get this error after deleting the 'global' section from the default configuration.

/var has different permissions between VyOS 1.1.7 and VyOS 1.2.X

Here is a sanitised copy of the auth-ldap script. I never wrote it! Its just what we use :) It will need modifying to work

We do this a lot, having certificate + user auth for OpenVPN. Using this open VPN option, a custom auth script and extra packages:

Dare I suggest SVN as well?

I was thinking of just updating the ssh service

Seems sensible to combine them both are similar changes and will be managed by same cfg scripts/templates.

I found the original task, this one is a duplicate of https://phabricator.vyos.net/T91

Multiple inbound-interfaces was going to be the next task I raised for wan load-balancing :). We should probably change the name of the option to something more descriptive of what it does. exclude-traffic-from-interfaces or similar.

I've never tried DMVPN but have done many P-to-P IPSec configs. IPSec behind NAT is not straight forward, your tunnel configuration is wrong, the local-ip of the tunnel needs to be your NAT'ed IP (IE. Something from RFC1918) not your external IP otherwise the ESP Policies will not match.