ansible-roles/roles/radius_server/templates/sites.conf.j2

server site {
  listen {
    type = auth
    ipaddr = *
    port = {{ rad_auth_port }}
    limit {
      max_connections = 16
      lifetime = 0
      idle_timeout = 30
    }
  }

  authorize {
    eap {
      ok = return
    }
  }

  authenticate {
    eap
  }

  session {
  }

  post-auth {
    update {
      &reply: += &session-state:
    }
  }
}