ffho-site/site.conf

{
	-- A new node's name will be autogenerated from
	-- it's primary MAC address and this prefix.
	-- e.g. freifunk-0123456789ab
	hostname_prefix = 'freifunk',

	-- name of this site
	-- site_name = 'Freifunk Hochstift - ${site}',
	site_name = 'Freifunk Hochstift',

	-- short name of this site
	-- site_code = 'ffho_${un-code}'
	site_code = 'ffho',

	default_domain = 'ffho_yho',

	-- timezone
	timezone = 'CET-1CEST,M3.5.0,M10.5.0/3', -- Europe/Berlin

	-- network-internal ntp service
	ntp_servers = {'ntp.srv.in.ffho.net'},

	-- regulatory domain of your wifi
	regdom = 'DE',

	-- wifi settings (2.4 GHz and 5 GHz)
	-- ap.ssid = 'hochstift.freifunk.net/${kürzel}',
	-- mesh.id = 'ffho-mesh-${group-name}',
	wifi24 = {
		mesh = {
			mcast_rate = 12000,
		},
	},

	wifi5 = {
		mesh = {
			mcast_rate = 12000,
		},
	},

	mesh_vpn = {
		-- the maximum transfer unit
		mtu = 1406,

		-- fastd (vpn) settings
		fastd = {
			-- cipher(s) to use
			configurable = true,
			methods = {'salsa2012+umac'},
		},

		-- default traffic shaping (bandwidth limit) settings
		bandwidth_limit = {
			enabled = false,
			egress = 500,
			ingress = 4000,
		},
	},

	-- configure the autoupdater
	autoupdater = {
		-- default branch for a firmware without enabled autoupdater
		branch = 'stable',

		-- available branches for the autoupdater
		branches = {
			stable = {
				-- visible name of this branch (why not use the internal identifier here, too)
				name = 'stable',

				-- where to get the manifest file (without the trailing /manifest)
				-- It's wise to use an internal address here,
				-- but specifying a publicly available update site does not hurt.
				mirrors = {'http://firmware.srv.in.ffho.net/stable/sysupgrade', 'http://[2a03:2260:2342:f251::6]/stable/sysupgrade', 'http://firmware.ffho.net/stable/sysupgrade'},

				-- Number of valid manifest signatures necessary to accept the manifest as "good".
				good_signatures = 3,

				-- list of public keys which are considered "good" for manifest signatures
				pubkeys = {
					'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
					'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
					'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
					'39ef16b1853e54249dae2d06948329a93e3e13f354aaab792552aacd1d0b45ba', -- phimeas
				},
			},
			testing = {
				name = 'testing',
				mirrors = {'http://firmware.srv.in.ffho.net/testing/sysupgrade', 'http://[2a03:2260:2342:f251::6]/testing/sysupgrade', 'http://firmware.ffho.net/testing/sysupgrade'},
				good_signatures = 2,
				pubkeys = {
					'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
					'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
					'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
					'39ef16b1853e54249dae2d06948329a93e3e13f354aaab792552aacd1d0b45ba', -- phimeas
				},
			},
			experimental = {
				name = 'experimental',
				mirrors = {'http://firmware.srv.in.ffho.net/experimental/sysupgrade', 'http://[2a03:2260:2342:f251::6]/experimental/sysupgrade', 'http://firmware.ffho.net/experimental/sysupgrade'},
				good_signatures = 1,
				pubkeys = {
					'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
					'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
					'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
					'39ef16b1853e54249dae2d06948329a93e3e13f354aaab792552aacd1d0b45ba', -- phimeas
				},
			},
		},
	},

	config_mode = {
		-- Show/hide the altitude field
		geo_location = {
			show_altitude = false,
			osm = {
				center = {
					lat = 51.695543946,
					lon = 8.958663940,
				},
				zoom = 11,
			},
		},
		-- define if the contact field is obligatory (optional)
		owner = {
			obligatory = false,
		},
	},

	-- configure DNS forwarding
	dns = {
		servers = { '2a03:2260:2342:f251::53' },
	},
}