ffpb.conf 7.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232
  1. {
  2. -- A new node's name will be autogenerated from
  3. -- it's primary MAC address and this prefix.
  4. -- e.g. freifunk-0123456789ab
  5. hostname_prefix = 'freifunk',
  6. -- name of this community
  7. site_name = 'Freifunk Paderborn',
  8. -- short name of this community
  9. site_code = 'ffpb',
  10. -- v4 and v6 prefixes in which nodes+clients might get an IP
  11. prefix4 = '10.132.0.0/18',
  12. prefix6 = 'fdca:ffee:ff12:132::/64',
  13. -- extra ipv6 prefixes used in this mesh area
  14. additional_prefix6 = { '2001:470:6d:860::/64', },
  15. -- timezone
  16. timezone = 'CET-1CEST,M3.5.0,M10.5.0/3', -- Europe/Berlin
  17. -- network-internal ntp service
  18. ntp_servers = {'ntp.services.ffpb'},
  19. -- OpenWRT Package Repository (IPv6 capable)
  20. opkg_repo = 'http://bo.mirror.garr.it/pub/1/openwrt/barrier_breaker/14.07/%S/packages/',
  21. -- regulatory domain of your wifi
  22. regdom = 'DE',
  23. -- wifi settings (2.4 GHz and 5 GHz)
  24. -- the most important thing to change is the SSID
  25. -- of the client network (yourcity.freifunk.net) and
  26. -- both(!) mesh_?ssid ad-hoc mesh network ids.
  27. wifi24 = {
  28. ssid = 'paderborn.freifunk.net',
  29. channel = 1,
  30. htmode = 'HT20',
  31. mesh_ssid = '02:d1:11:13:87:ad',
  32. mesh_bssid = '02:d1:11:13:87:ad',
  33. mesh_mcast_rate = 12000,
  34. },
  35. wifi5 = {
  36. ssid = 'paderborn.freifunk.net',
  37. channel = 44,
  38. htmode = 'HT40+',
  39. mesh_ssid = '02:d1:11:13:87:ad',
  40. mesh_bssid = '02:d1:11:13:87:ad',
  41. mesh_mcast_rate = 12000,
  42. },
  43. -- IP address of each router
  44. -- At this IP a client can always connect to its
  45. -- currently connected node. Both v4 and v6 addr.
  46. -- must lie in the above prefix4 and prefix6.
  47. next_node = {
  48. ip4 = '10.132.0.1',
  49. ip6 = 'fdca:ffee:ff12:132::1',
  50. -- mac address, must be unique in the client network
  51. -- (usually, you don't need to change this)
  52. mac = '16:41:95:40:f7:dc',
  53. },
  54. -- fastd (vpn) settings
  55. fastd_mesh_vpn = {
  56. -- cipher(s) to use
  57. methods = {'salsa2012+gmac'},
  58. -- the maximum transfer unit
  59. -- use 1426 for IPv4 gateways
  60. mtu = 1406,
  61. groups = {
  62. backbone = {
  63. -- specifies how many servers are contacted
  64. -- by a client simultanously
  65. limit = 1,
  66. -- list all available vpn servers
  67. peers = {
  68. gw01 = {
  69. -- public fastd key of the vpn server
  70. key = '97bc56ae561f67cfe15364134868c3553b5f1eab06f7bd9c5b93fbf280a52b51',
  71. -- remotes is an array of ways on how to reach the VPN server
  72. -- Use public addresses here, these addresses are used when the mesh might not be connected yet.
  73. -- format: '[|ipv4|ipv6] "hostname-or-ip-address" port 10000'
  74. remotes = {
  75. 'ipv6 "v6.gw01.paderborn.freifunk.net" port 10000',
  76. 'ipv4 "v4.gw01.paderborn.freifunk.net" port 10000',
  77. 'ipv6 "2a01:4f8:190:2105::ff12" port 10000',
  78. 'ipv4 "85.10.248.243" port 10000',
  79. },
  80. },
  81. gw02 = {
  82. key = 'e8fa9bf402fd33dd1ba804a97f2e46c704423ff49e9c55312845a7bfb93121ad',
  83. remotes = {
  84. 'ipv6 "v6.gw02.paderborn.freifunk.net" port 10000',
  85. 'ipv4 "v4.gw02.paderborn.freifunk.net" port 10000',
  86. 'ipv6 "2a01:4f8:190:6500::18:1" port 10000',
  87. 'ipv4 "78.46.242.24" port 10000',
  88. },
  89. },
  90. gw03 = {
  91. key = 'cf7b54f7221a26251a5970e1d404f864ff4bfed3254bd741cf754445e040b9d0',
  92. remotes = {
  93. 'ipv6 "v6.gw03.paderborn.freifunk.net" port 10000',
  94. 'ipv4 "v4.gw03.paderborn.freifunk.net" port 10000',
  95. 'ipv6 "2a01:a700:4621:d100::10" port 10000',
  96. 'ipv4 "31.172.8.123" port 10000',
  97. },
  98. },
  99. gw04 = {
  100. key = 'cf3855e5fa04e4c04a294cb6e8902f91c7ff7ef82bf031cc842a2b79b936677c',
  101. remotes = {
  102. 'ipv6 "v6.gw04.paderborn.freifunk.net" port 10000',
  103. 'ipv4 "v4.gw04.paderborn.freifunk.net" port 10000',
  104. 'ipv6 "2a02:450:1:4::10" port 10000',
  105. 'ipv4 "80.70.181.57" port 10000',
  106. },
  107. },
  108. gw05 = {
  109. key = 'd0d32a2f536a0fc1f0c848e6da15bd96851d5ff4fdf9239c830bab033ddcec1a',
  110. remotes = {
  111. 'ipv6 "v6.gw05.paderborn.freifunk.net" port 10000',
  112. 'ipv4 "v4.gw05.paderborn.freifunk.net" port 10000',
  113. 'ipv6 "2001:638:502:1884::ff05" port 10000',
  114. 'ipv4 "192.26.175.182" port 10000',
  115. },
  116. },
  117. gw06 = {
  118. key = 'b912bcf1c1335390364b8030448e53d8869b650f32923e59bf01d763d3028840',
  119. remotes = {
  120. 'ipv6 "v6.gw06.paderborn.freifunk.net" port 10000',
  121. 'ipv4 "v4.gw06.paderborn.freifunk.net" port 10000',
  122. 'ipv6 "2a03:4000:6:20f0::ff12" port 10000',
  123. 'ipv4 "5.45.111.222" port 10000',
  124. },
  125. },
  126. gw08 = {
  127. key = '3da050bbf1c3e95af286af65553f546fd563d9cb5d4b3b3444069bef281de621',
  128. remotes = {
  129. 'ipv6 "v6.gw08.paderborn.freifunk.net" port 10000',
  130. 'ipv4 "v4.gw08.paderborn.freifunk.net" port 10000',
  131. 'ipv6 "2a03:4000:6:1151::ff12" port 10000',
  132. 'ipv4 "5.45.107.59" port 10000',
  133. },
  134. },
  135. },
  136. },
  137. },
  138. },
  139. -- configure the autoupdater
  140. autoupdater = {
  141. enabled = 1,
  142. -- default branch for a firmware
  143. -- In config-mode, the user can select a different branch from below
  144. branch = 'stable',
  145. -- available branches for the autoupdater
  146. branches = {
  147. stable = {
  148. -- visible name of this branch (why not use the internal identifier here, too)
  149. name = 'stable',
  150. -- where to get the manifest file (without the trailing /manifest)
  151. -- It's wise to use an internal address here,
  152. -- but specifying a publicly available update site does not hurt.
  153. mirrors = {'http://[fdca:ffee:ff12:a254::80]/stable', 'http://firmware.paderborn.freifunk.net/stable'},
  154. -- Number of valid manifest signatures necessary to accept the manifest as "good".
  155. good_signatures = 3,
  156. -- list of public keys which are considered "good" for manifest signatures
  157. pubkeys = {
  158. '16b0e942929d6592d4a01b66b334427ba4db03b388a876432958d9010bd8d8b5', -- HeJ
  159. 'b0197042824a752c2dba717a4b2ded88852111bbe12e6b5f57fdfa3abb9312c0', -- thardes2
  160. 'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
  161. 'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
  162. 'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
  163. },
  164. },
  165. testing = {
  166. name = 'testing',
  167. mirrors = {'http://[fdca:ffee:ff12:a254::80]/testing','http://firmware.paderborn.freifunk.net/testing'},
  168. good_signatures = 2,
  169. pubkeys = {
  170. '16b0e942929d6592d4a01b66b334427ba4db03b388a876432958d9010bd8d8b5', -- HeJ
  171. 'b0197042824a752c2dba717a4b2ded88852111bbe12e6b5f57fdfa3abb9312c0', -- thardes2
  172. 'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
  173. 'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
  174. 'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
  175. },
  176. },
  177. experimental = {
  178. name = 'experimental',
  179. mirrors = {'http://[fdca:ffee:ff12:a254::80]/experimental','http://firmware.paderborn.freifunk.net/experimental'},
  180. good_signatures = 1,
  181. pubkeys = {
  182. '16b0e942929d6592d4a01b66b334427ba4db03b388a876432958d9010bd8d8b5', -- HeJ
  183. 'b0197042824a752c2dba717a4b2ded88852111bbe12e6b5f57fdfa3abb9312c0', -- thardes2
  184. 'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
  185. 'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
  186. 'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
  187. },
  188. },
  189. },
  190. },
  191. -- default traffic shaping (bandwidth limit) settings
  192. simple_tc = {
  193. mesh_vpn = {
  194. ifname = 'mesh-vpn',
  195. enabled = false,
  196. limit_egress = 200,
  197. limit_ingress = 3000,
  198. },
  199. },
  200. -- configure ffpb-debug
  201. debugserver = {
  202. host = { 'debugreport.paderborn.freifunk.net', 'fdca:ffee:ff12:a254::deb9' },
  203. port = 1337,
  204. liveport = 1338,
  205. },
  206. -- enable BATMAN on WAN interface by default (requires gluon-batman-on-wan package)
  207. batman_on_wan = 0,
  208. }