template.conf 7.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250
  1. {
  2. -- A new node's name will be autogenerated from
  3. -- it's primary MAC address and this prefix.
  4. -- e.g. freifunk-0123456789ab
  5. hostname_prefix = 'freifunk',
  6. -- name of this site
  7. -- site_name = 'Freifunk Hochstift - ${site}',
  8. site_name = '%SN',
  9. -- short name of this site
  10. -- site_code = 'ffho_${un-code}'
  11. site_code = '%SC',
  12. -- v4 and v6 prefixes in which nodes+clients might get an IP
  13. prefix4 = '10.132.0.0/18',
  14. prefix6 = 'fdca:ffee:ff12:132::/64',
  15. -- extra ipv6 prefixes used in this mesh area
  16. additional_prefix6 = { '2001:470:6d:860::/64', '2a03:2260:2342:2300::/64', },
  17. -- timezone
  18. timezone = 'CET-1CEST,M3.5.0,M10.5.0/3', -- Europe/Berlin
  19. -- network-internal ntp service
  20. ntp_servers = {'ntp.in.ffho.net'},
  21. -- OpenWRT Package Repository (IPv6 capable)
  22. opkg = {
  23. openwrt = 'http://openwrt.draic.info/%n/%v/%S/packages',
  24. extra = {
  25. modules = 'http://firmware.srv.in.ffho.net/%GR/modules/%S',
  26. },
  27. },
  28. -- regulatory domain of your wifi
  29. regdom = 'DE',
  30. -- wifi settings (2.4 GHz and 5 GHz)
  31. -- ap.ssid = 'hochstift.freifunk.net/${kürzel}',
  32. -- ibss.ssid = 'ffho-mesh-${un-code}',
  33. -- ibss.bssid = '${idividual-mac}'
  34. -- mesh.id = 'ffho-mesh-${un-code}',
  35. wifi24 = {
  36. channel = 1,
  37. supported_rates = {6000, 9000, 12000, 18000, 24000, 36000, 48000, 54000},
  38. basic_rate = {6000, 9000, 18000, 36000, 54000},
  39. ap = {
  40. ssid = 'paderborn.freifunk.net',
  41. },
  42. ibss = {
  43. ssid = '02:d1:11:13:87:ad',
  44. bssid = '02:d1:11:13:87:ad',
  45. mcast_rate = 12000,
  46. },
  47. },
  48. wifi5 = {
  49. channel = 44,
  50. ap = {
  51. ssid = 'paderborn.freifunk.net',
  52. },
  53. mesh = {
  54. id = 'ffho-mesh-legacy',
  55. mcast_rate = 12000,
  56. },
  57. },
  58. -- IP address of each router
  59. -- At this IP a client can always connect to its
  60. -- currently connected node. Both v4 and v6 addr.
  61. -- must lie in the above prefix4 and prefix6.
  62. next_node = {
  63. ip4 = '10.132.0.1',
  64. ip6 = 'fdca:ffee:ff12:132::1',
  65. -- mac address, must be unique in the client network
  66. -- (usually, you don't need to change this)
  67. mac = '16:41:95:40:f7:dc',
  68. },
  69. -- fastd (vpn) settings
  70. fastd_mesh_vpn = {
  71. -- cipher(s) to use
  72. methods = {'salsa2012+umac'},
  73. -- the maximum transfer unit
  74. -- use 1426 for IPv4 gateways
  75. mtu = 1406,
  76. groups = {
  77. backbone = {
  78. -- specifies how many servers are contacted
  79. -- by a client simultanously
  80. limit = 1,
  81. -- list all available vpn servers
  82. peers = {
  83. gw01 = {
  84. -- public fastd key of the vpn server
  85. key = '97bc56ae561f67cfe15364134868c3553b5f1eab06f7bd9c5b93fbf280a52b51',
  86. -- remotes is an array of ways on how to reach the VPN server
  87. -- Use public addresses here, these addresses are used when the mesh might not be connected yet.
  88. -- format: '[|ipv4|ipv6] "hostname-or-ip-address" port 10000'
  89. remotes = {
  90. '"gw01.paderborn.freifunk.net" port 10000',
  91. 'ipv6 "2a01:4f8:190:2105::ff12" port 10000',
  92. 'ipv4 "85.10.248.243" port 10000',
  93. },
  94. },
  95. gw02 = {
  96. key = 'e8fa9bf402fd33dd1ba804a97f2e46c704423ff49e9c55312845a7bfb93121ad',
  97. remotes = {
  98. '"gw02.paderborn.freifunk.net" port 10000',
  99. 'ipv6 "2a01:4f8:190:6500::18:1" port 10000',
  100. 'ipv4 "78.46.242.24" port 10000',
  101. },
  102. },
  103. gw03 = {
  104. key = '629b2742922f068ef49558283aea4b75c1427d8cdd3fcd2dbd7c00880547d3b3',
  105. remotes = { '"gw03.ffho.net" port 10000'},
  106. },
  107. gw04 = {
  108. key = 'cf3855e5fa04e4c04a294cb6e8902f91c7ff7ef82bf031cc842a2b79b936677c',
  109. remotes = {
  110. '"gw04.paderborn.freifunk.net" port 10000',
  111. 'ipv6 "2a02:450:1:4::10" port 10000',
  112. 'ipv4 "80.70.181.57" port 10000',
  113. },
  114. },
  115. gw05 = {
  116. key = 'd0d32a2f536a0fc1f0c848e6da15bd96851d5ff4fdf9239c830bab033ddcec1a',
  117. remotes = {
  118. '"gw05.paderborn.freifunk.net" port 10000',
  119. 'ipv6 "2001:638:502:1884::ff05" port 10000',
  120. 'ipv4 "192.26.175.182" port 10000',
  121. },
  122. },
  123. gw08 = {
  124. key = '3da050bbf1c3e95af286af65553f546fd563d9cb5d4b3b3444069bef281de621',
  125. remotes = {
  126. '"gw08.paderborn.freifunk.net" port 10000',
  127. 'ipv6 "2a03:4000:6:1151::ff12" port 10000',
  128. 'ipv4 "5.45.107.59" port 10000',
  129. },
  130. },
  131. },
  132. },
  133. },
  134. -- default traffic shaping (bandwidth limit) settings
  135. bandwidth_limit = {
  136. enabled = false,
  137. egress = 500,
  138. ingress = 4000,
  139. },
  140. },
  141. -- configure the autoupdater
  142. autoupdater = {
  143. -- default branch for a firmware without enabled autoupdater
  144. branch = 'stable',
  145. -- available branches for the autoupdater
  146. branches = {
  147. stable = {
  148. -- visible name of this branch (why not use the internal identifier here, too)
  149. name = 'stable',
  150. -- where to get the manifest file (without the trailing /manifest)
  151. -- It's wise to use an internal address here,
  152. -- but specifying a publicly available update site does not hurt.
  153. mirrors = {'http://firmware.srv.in.ffho.net/%SC/stable/sysupgrade', 'http://[2a03:2260:2342:f251::6]/%SC/stable/sysupgrade'},
  154. -- Number of valid manifest signatures necessary to accept the manifest as "good".
  155. good_signatures = 3,
  156. -- list of public keys which are considered "good" for manifest signatures
  157. pubkeys = {
  158. 'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
  159. 'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
  160. 'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
  161. '9841dde0b9f6485d5fcdc858fb15c1db1c3bc77fb81aef3f0d4b835f76a3d73b', -- kb-light
  162. '39ef16b1853e54249dae2d06948329a93e3e13f354aaab792552aacd1d0b45ba', -- phimeas
  163. '5126eda4161bca3fcae134fa0e1824e55dffb986cc4e7fe37842857a118e2820', -- leeps
  164. },
  165. },
  166. testing = {
  167. name = 'testing',
  168. mirrors = {'http://firmware.srv.in.ffho.net/%SC/testing/sysupgrade', 'http://[2a03:2260:2342:f251::6]/%SC/testing/sysupgrade'},
  169. good_signatures = 2,
  170. pubkeys = {
  171. 'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
  172. 'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
  173. 'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
  174. '9841dde0b9f6485d5fcdc858fb15c1db1c3bc77fb81aef3f0d4b835f76a3d73b', -- kb-light
  175. '39ef16b1853e54249dae2d06948329a93e3e13f354aaab792552aacd1d0b45ba', -- phimeas
  176. '5126eda4161bca3fcae134fa0e1824e55dffb986cc4e7fe37842857a118e2820', -- leeps
  177. },
  178. },
  179. experimental = {
  180. name = 'experimental',
  181. mirrors = {'http://firmware.srv.in.ffho.net/%SC/experimental/sysupgrade', 'http://[2a03:2260:2342:f251::6]/%SC/experimental/sysupgrade'},
  182. good_signatures = 1,
  183. pubkeys = {
  184. 'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
  185. 'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
  186. 'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
  187. '9841dde0b9f6485d5fcdc858fb15c1db1c3bc77fb81aef3f0d4b835f76a3d73b', -- kb-light
  188. '39ef16b1853e54249dae2d06948329a93e3e13f354aaab792552aacd1d0b45ba', -- phimeas
  189. '5126eda4161bca3fcae134fa0e1824e55dffb986cc4e7fe37842857a118e2820', -- leeps
  190. },
  191. },
  192. },
  193. },
  194. -- configure ffho-debug
  195. debugserver = {
  196. host = { 'debugreport.ffho.net', '2a01:a700:4621:d102::10' },
  197. port = 1337,
  198. },
  199. -- enable BATMAN on WAN interface by default (requires gluon-batman-on-wan package)
  200. batman_on_wan = 0,
  201. config_mode = {
  202. geo_location = {
  203. show_altitude = false,
  204. },
  205. owner = {
  206. obligatory = false,
  207. },
  208. },
  209. -- link to map
  210. status_page = {
  211. location_link = 'https://map.hochstift.freifunk.net/#!v:m;n:',
  212. },
  213. -- geo-default site
  214. site_select = {
  215. geo_default_site = 'ffho_uml',
  216. },
  217. ath9k_workaround = {
  218. blackout_wait = 90,
  219. reset_wait = 720,
  220. step_size = 10,
  221. },
  222. }