site.rst

echo $(hexdump -v -n 32 -e '1/1 "%02x"' </dev/urandom)
prefix4 = '10.111.111.0/18'
prefix6 = 'fdca::ffee:babe:1::/64'
node_prefix6 = 'fdca::ffee:babe:2::/64'
node_client_prefix6 = 'fdca::ffee:babe:3::/64'
-- Europe/Berlin
timezone = 'CET-1CEST,M3.5.0,M10.5.0/3'
ntp_servers = {'1.ntp.services.ffac','2.ntp.services.ffac'}
opkg = {
  openwrt = 'http://opkg.services.ffac/openwrt/snapshots/packages/%A',
  extra = {
    gluon = 'http://opkg.services.ffac/modules/gluon-%GS-%GR/%S',
  },
}
regdom = 'DE'
wifi24 = {
  channel = 11,
  ap = {
    ssid = 'alpha-centauri.freifunk.net',
    owe_ssid = 'owe.alpha-centauri.freifunk.net',
    owe_transition_mode = true,
  },
  mesh = {
    id = 'ueH3uXjdp',
    mcast_rate = 12000,
  },
},
wifi5 = {
  channel = 44,
  outdoor_chanlist = "100-140",

  [...]
},
next_node = {
  name = { 'nextnode.location.community.example.org', 'nextnode', 'nn' },
  ip4 = '10.23.42.1',
  ip6 = 'fdca:ffee:babe:1::1',
  mac = '16:41:95:40:f7:dc'
}
mesh = {
  vxlan = true,
  filter_membership_reports = false,
  batman_adv = {
    routing_algo = 'BATMAN_IV',
    gw_sel_class = 1,
  },
}
mesh_vpn = {
  -- enabled = true,
  mtu = 1312,
  -- pubkey_privacy = true,

  fastd = {
    methods = {'salsa2012+umac'},
    -- configurable = true,
    -- syslog_level = 'warn',
    groups = {
      backbone = {
        -- Limit number of connected peers from this group
        limit = 1,
        peers = {
          peer1 = {
            key = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX',
            -- Having multiple domains prevents SPOF in freifunk.net
            remotes = {
              'ipv4 "vpn1.alpha-centauri.freifunk.net" port 10000',
              'ipv4 "vpn1.alpha-centauri-freifunk.de" port 10000',
            },
          },
          peer2 = {
            key = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX',
            -- You can also omit the ipv4 to allow both connection via ipv4 and ipv6
            remotes = {'"vpn2.alpha-centauri.freifunk.net" port 10000'},
          },
          peer3 = {
            key = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX',
            -- In addition to domains you can also add ip addresses, which provides
            -- resilience in case of dns outages
            remotes = {
              '"vpn3.alpha-centauri.freifunk.net" port 10000',
              '[2001:db8::3:1]:10000',
              '192.0.2.3:10000',
            },
          },
        },
        -- Optional: nested peer groups
        -- groups = {
        --   lowend_backbone = {
        --     limit = 1,
        --     peers = ...
        --   },
        -- },
      },
      -- Optional: additional peer groups, possibly with other limits
      -- peertopeer = {
      --   limit = 10,
      --   peers = { ... },
      -- },
    },
  },

  tunneldigger = {
    brokers = {'vpn1.alpha-centauri.freifunk.net'}
  },

  bandwidth_limit = {
    -- The bandwidth limit can be enabled by default here.
    enabled = false,

    -- Default upload limit (kbit/s).
    egress = 200,

    -- Default download limit (kbit/s).
    ingress = 3000,
  },
}
mesh_on_wan = true,
mesh_on_lan = true,
autoupdater = {
  branch = 'stable',
  branches = {
    stable = {
      name = 'stable',
      mirrors = {
        'http://[fdca:ffee:babe:1::fec1]/firmware/stable/sysupgrade/',
        'http://autoupdate.alpha-centauri.freifunk.net/firmware/stable/sysupgrade/',
      },
      -- Number of good signatures required
      good_signatures = 2,
      pubkeys = {
        'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX', -- someguy
        'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX', -- someother
      }
    }
  }
}
config_mode = {
  hostname = {
    optional = false,
    prefill = true,
  },
  geo_location = {
    show_altitude = true,
    osm = {
      center = {
        lat = 52.951947558,
        lon = 8.744238281,
      },
      zoom = 13,
      -- openlayers_url = 'http://ffac.example.org/openlayer',
    },
  },
  remote_login = {
    show_password_form = true,
    min_password_length = 10,
  },
},
roles = {
  default = 'node',
  list = {
    'node',
    'test',
    'backbone',
    'service',
  },
},
setup_mode = {
  skip = true,
},
GLUON_SITE_FEEDS='foo bar'