arm64: pinenote_defconfig: Enable modules for IPsec

Enable the modules for strongSwan's IPsec support.
While at it, also enable ``INET_DIAG`` as that's really useful.

Link: https://docs.strongswan.org/docs/latest/install/kernelModules.html

Author: diederikdehaas

arch/arm64/configs/pinenote_defconfig

@@ -939,9 +939,13 @@ CONFIG_BRIDGE_VLAN_FILTERING=y
 ##
 ## file: net/ipv4/Kconfig
 ##
+CONFIG_IP_ADVANCED_ROUTER=y
+CONFIG_IP_MULTIPLE_TABLES=y
 CONFIG_SYN_COOKIES=y
+CONFIG_INET_AH=m
 CONFIG_INET_ESP=m
-# CONFIG_INET_DIAG is not set
+CONFIG_INET_IPCOMP=m
+CONFIG_INET_DIAG=m
 
 ##
 ## file: net/ipv4/netfilter/Kconfig
@@ -956,7 +960,12 @@ CONFIG_IP_NF_MANGLE=m
 ##
 ## file: net/ipv6/Kconfig
 ##
-# CONFIG_IPV6_SIT is not set
+CONFIG_IPV6=y
+CONFIG_INET6_AH=m
+CONFIG_INET6_ESP=m
+CONFIG_INET6_IPCOMP=m
+CONFIG_IPV6_SIT=m
+CONFIG_IPV6_MULTIPLE_TABLES=y
 
 ##
 ## file: net/ipv6/netfilter/Kconfig
@@ -983,12 +992,13 @@ CONFIG_NFT_REDIR=m
 CONFIG_NFT_REJECT=m
 CONFIG_NFT_COMPAT=m
 CONFIG_NFT_HASH=m
-CONFIG_NETFILTER_XTABLES=y
+CONFIG_NETFILTER_XTABLES=m
 CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m
 CONFIG_NETFILTER_XT_TARGET_MARK=m
 CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m
 CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
 CONFIG_NETFILTER_XT_MATCH_IPVS=m
+CONFIG_NETFILTER_XT_MATCH_POLICY=m
 
 ##
 ## file: net/netfilter/ipvs/Kconfig