template.conf 7.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244
  1. {
  2. -- A new node's name will be autogenerated from
  3. -- it's primary MAC address and this prefix.
  4. -- e.g. freifunk-0123456789ab
  5. hostname_prefix = 'freifunk',
  6. -- name of this site
  7. -- site_name = 'Freifunk Hochstift - ${site}',
  8. site_name = '%SN',
  9. -- short name of this site
  10. -- site_code = 'ffho_${un-code}'
  11. site_code = '%SC',
  12. -- v4 and v6 prefixes in which nodes+clients might get an IP
  13. prefix4 = '%V4',
  14. prefix6 = '2a03:2260:2342:%V6::/64',
  15. -- timezone
  16. timezone = 'CET-1CEST,M3.5.0,M10.5.0/3', -- Europe/Berlin
  17. -- network-internal ntp service
  18. ntp_servers = {'ntp.srv.in.ffho.net'},
  19. -- OpenWRT Package Repository (IPv6 capable)
  20. opkg = {
  21. openwrt = 'http://firmware.srv.in.ffho.net/openwrt/%n/%v/%S/packages',
  22. extra = {
  23. modules = 'http://firmware.srv.in.ffho.net/%GR/modules/%S',
  24. },
  25. },
  26. -- regulatory domain of your wifi
  27. regdom = 'DE',
  28. -- wifi settings (2.4 GHz and 5 GHz)
  29. -- ap.ssid = 'hochstift.freifunk.net/${kürzel}',
  30. -- mesh.id = 'ffho-mesh-${group-name}',
  31. wifi24 = {
  32. channel = 1,
  33. supported_rates = {6000, 9000, 12000, 18000, 24000, 36000, 48000, 54000},
  34. basic_rate = {6000, 9000, 18000, 36000, 54000},
  35. ap = {
  36. ssid = '%SS',
  37. },
  38. mesh = {
  39. id = 'ffho-mesh-%GN',
  40. mcast_rate = 12000,
  41. },
  42. },
  43. wifi5 = {
  44. channel = 44,
  45. ap = {
  46. ssid = '%SS',
  47. },
  48. mesh = {
  49. id = 'ffho-mesh-%GN',
  50. mcast_rate = 12000,
  51. },
  52. },
  53. -- IP address of each router
  54. -- At this IP a client can always connect to its
  55. -- currently connected node. Both v4 and v6 addr.
  56. -- must lie in the above prefix4 and prefix6.
  57. next_node = {
  58. ip4 = '%N4',
  59. ip6 = '2a03:2260:2342:%V6::1',
  60. -- mac address, must be unique in the client network
  61. -- (usually, you don't need to change this)
  62. mac = 'f2:ff:ff:%ID:ff:ff',
  63. },
  64. -- fastd (vpn) settings
  65. fastd_mesh_vpn = {
  66. -- cipher(s) to use
  67. methods = {'salsa2012+umac'},
  68. -- the maximum transfer unit
  69. mtu = 1406,
  70. groups = {
  71. backbone = {
  72. -- specifies how many servers are contacted
  73. -- by a client simultanously
  74. limit = 1,
  75. -- list all available vpn servers
  76. peers = {
  77. gw01 = {
  78. -- public fastd key of the vpn server
  79. key = '97bc56ae561f67cfe15364134868c3553b5f1eab06f7bd9c5b93fbf280a52b51',
  80. -- remotes is an array of ways on how to reach the VPN server
  81. -- Use public addresses here, these addresses are used when the mesh might not be connected yet.
  82. -- format: '[|ipv4|ipv6] "hostname-or-ip-address" port 10000'
  83. remotes = {
  84. '"gw01.ffho.net" port 100%ID',
  85. 'ipv6 "2001:830:c:9::12" port 100%ID',
  86. 'ipv4 "80.242.130.70" port 100%ID',
  87. },
  88. },
  89. gw02 = {
  90. key = 'e8fa9bf402fd33dd1ba804a97f2e46c704423ff49e9c55312845a7bfb93121ad',
  91. remotes = {
  92. '"gw02.ffho.net" port 100%ID',
  93. 'ipv6 "2a01:4f8:190:6500::18:1" port 100%ID',
  94. 'ipv4 "78.46.242.24" port 100%ID',
  95. },
  96. },
  97. gw03 = {
  98. key = '629b2742922f068ef49558283aea4b75c1427d8cdd3fcd2dbd7c00880547d3b3',
  99. remotes = {
  100. '"gw03.ffho.net" port 100%ID',
  101. 'ipv6 "2a00:13c8:1000:2::165" port 100%ID',
  102. 'ipv4 "185.46.137.165" port 100%ID',
  103. },
  104. },
  105. gw04 = {
  106. key = 'cf3855e5fa04e4c04a294cb6e8902f91c7ff7ef82bf031cc842a2b79b936677c',
  107. remotes = {
  108. '"gw04.ffho.net" port 100%ID',
  109. 'ipv6 "2a02:450:1::22" port 100%ID',
  110. 'ipv4 "80.70.181.63" port 100%ID',
  111. },
  112. },
  113. gw05 = {
  114. key = 'd0d32a2f536a0fc1f0c848e6da15bd96851d5ff4fdf9239c830bab033ddcec1a',
  115. remotes = {
  116. '"gw05.ffho.net" port 100%ID',
  117. 'ipv6 "2001:638:502:1884::ff15" port 100%ID',
  118. 'ipv4 "192.26.175.183" port 100%ID',
  119. },
  120. },
  121. gw06 = {
  122. key = '88b570c4cc811259b7c4106943098c9bee1126d692ddacedd23cd48efc28b0bf',
  123. remotes = {
  124. '"gw06.ffho.net" port 100%ID',
  125. 'ipv6 "2001:41d0:a:377a::54" port 100%ID',
  126. 'ipv4 "5.196.106.54" port 100%ID',
  127. },
  128. },
  129. },
  130. },
  131. },
  132. -- default traffic shaping (bandwidth limit) settings
  133. bandwidth_limit = {
  134. enabled = false,
  135. egress = 500,
  136. ingress = 4000,
  137. },
  138. },
  139. -- configure the autoupdater
  140. autoupdater = {
  141. -- default branch for a firmware without enabled autoupdater
  142. branch = 'stable',
  143. -- available branches for the autoupdater
  144. branches = {
  145. stable = {
  146. -- visible name of this branch (why not use the internal identifier here, too)
  147. name = 'stable',
  148. -- where to get the manifest file (without the trailing /manifest)
  149. -- It's wise to use an internal address here,
  150. -- but specifying a publicly available update site does not hurt.
  151. mirrors = {'http://firmware.srv.in.ffho.net/%SC/stable/sysupgrade', 'http://[2a03:2260:2342:f251::6]/%SC/stable/sysupgrade'},
  152. -- Number of valid manifest signatures necessary to accept the manifest as "good".
  153. good_signatures = 3,
  154. -- list of public keys which are considered "good" for manifest signatures
  155. pubkeys = {
  156. 'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
  157. 'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
  158. 'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
  159. '9841dde0b9f6485d5fcdc858fb15c1db1c3bc77fb81aef3f0d4b835f76a3d73b', -- kb-light
  160. '39ef16b1853e54249dae2d06948329a93e3e13f354aaab792552aacd1d0b45ba', -- phimeas
  161. },
  162. },
  163. testing = {
  164. name = 'testing',
  165. mirrors = {'http://firmware.srv.in.ffho.net/%SC/testing/sysupgrade', 'http://[2a03:2260:2342:f251::6]/%SC/testing/sysupgrade'},
  166. good_signatures = 2,
  167. pubkeys = {
  168. 'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
  169. 'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
  170. 'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
  171. '9841dde0b9f6485d5fcdc858fb15c1db1c3bc77fb81aef3f0d4b835f76a3d73b', -- kb-light
  172. '39ef16b1853e54249dae2d06948329a93e3e13f354aaab792552aacd1d0b45ba', -- phimeas
  173. },
  174. },
  175. experimental = {
  176. name = 'experimental',
  177. mirrors = {'http://firmware.srv.in.ffho.net/%SC/experimental/sysupgrade', 'http://[2a03:2260:2342:f251::6]/%SC/experimental/sysupgrade'},
  178. good_signatures = 1,
  179. pubkeys = {
  180. 'ba2e6ff4de41ade9959702195d4c26c764e7aab85c627363681c29dbc4a8a2c5', -- oscar-
  181. 'fb9d6beba63dcb6175d0248c1e743b5fe4359474eb264d27f389d7a962e24477', -- northalpha
  182. 'f70f9ddeb307fff8fca31a76f4fbd0ac676dab8ad143625f0a4160d434d72876', -- Barbarossa
  183. '9841dde0b9f6485d5fcdc858fb15c1db1c3bc77fb81aef3f0d4b835f76a3d73b', -- kb-light
  184. '39ef16b1853e54249dae2d06948329a93e3e13f354aaab792552aacd1d0b45ba', -- phimeas
  185. },
  186. },
  187. },
  188. },
  189. -- configure ffho-debug
  190. debugserver = {
  191. host = { 'debugreport.ffho.net', '2a01:a700:4621:d102::10' },
  192. port = 1337,
  193. },
  194. -- enable BATMAN on WAN interface by default (requires gluon-batman-on-wan package)
  195. batman_on_wan = 0,
  196. config_mode = {
  197. geo_location = {
  198. show_altitude = false,
  199. },
  200. owner = {
  201. obligatory = false,
  202. },
  203. },
  204. -- link to map
  205. status_page = {
  206. location_link = 'https://map.hochstift.freifunk.net/#/de/map/',
  207. },
  208. -- geo-default site
  209. site_select = {
  210. geo_default_site = 'ffho_yho',
  211. },
  212. ath9k_workaround = {
  213. blackout_wait = 60,
  214. reset_wait = 300,
  215. step_size = 10,
  216. },
  217. }