site.conf

{
-- Site configuration File Freifunk Rheinbach
-- Thomas Arend
-- 2018
-- Master Konfiguration für Gluon Branch Master

  authorized_keys = {
  'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWJjFLLnarSVvniQFvjA3je/YTL98adZk7r1dIgSt5nLheUlPvM7KzC1gvhQZQVDOsIThRf3wzJfPwlLbIOo8uNFI6jTUM8YBlAZRLxNwVjRPWWzyp2g6ayHgpOENqBH3/sSjSmtxnPAF7Fw04d8RLui//Kdj3PQIaB0hnbbNtowvT6oFzt6WXwumIv1dF2sRz9ocIq/FfHHJcq/YEhzXZ0Ri3K452YEm1FGkhwZRRA7nrXkF+AjtNnb+6B3ytA7+6/xTwmLJGQqTJWB3xw3RSXU59WJcTKBw3Y9ZDjV5PqBQFmfgI7ZiWO3de71lZjoe1YwRuyy7azsiHubFIo+DP router@freifunkrheinbach.de'
  },
  hostname_prefix = 'su-rhb-',
  site_name = 'Freifunk Rheinbach',
  site_code = 'su-rhb',

  -- 32 bytes of random data, encoded in hexadecimal
  -- Must be the same for all nodes in one mesh domain
  -- Can be generated using: echo $(hexdump -v -n 32 -e '1/1 "%02x"' </dev/urandom)
  domain_seed = 'f3cf110c5f2dd9f7b8ea22a8d790e275e90103605970b85788c0024606cd8276',
  
  -- Die Module der Firmware werden auf dem Router im Arbeitszimmer su-rhb-zingsheim-31-az bereitgestellt.
  
  opkg = {
    extra = {
      modules = 'http://[fda0:747e:ab29:2241:16cc:20ff:fecd:15bc]/fffw/stableusb/modules/gluon-%GS-%GR/%S/',
    },
  },

  prefix4 = '10.111.0.0/16',
  prefix6 = 'fda0:747e:ab29:2241::/64',
  timezone = 'CET-1CEST,M3.5.0,M10.5.0/3', -- Europe/Berlin
 ntp_servers = {
    'fda0:747e:ab29:2241:c6e9:84ff:fef9:cbae',
    'fda0:747e:ab29:2241:a62b:b0ff:fedf:2901',
  },
   regdom = 'DE',
  wifi24 = {
    -- Wireless channel.
    channel = 5,
    ap = {
      ssid = 'Freifunk',
    },
    mesh = {
      id = 'su-ff-mesh',
      disabled = false, 
      mcast_rate = 12000,
    },
    ibss = {
      -- Adjust these values!
      ssid = 'su-ff-mesh',
      bssid = '02:74:05:d0:4f:20',
      disabled = true, 
      mcast_rate = 12000,
    },
  },

  wifi5 = {
    channel = 44,
      ap = {
      ssid = 'Freifunk',
    },
    mesh = {
      id = 'su-ff-mesh',
      disabled = false, 
      mcast_rate = 12000,
    },
    ibss = {
      -- Adjust these values!
      ssid = 'su-ff-mesh',
      bssid = '02:74:05:d0:4f:20',
      disabled = true, 
      mcast_rate = 12000,
    },
  },

  next_node = {
        ip4 = '10.111.0.1',
        ip6 = 'fda0:747e:ab29:2241::1',
        mac = '04:74:05:d0:4f:aa',
  },

  -- mesh: Optional, defalut is 20
  -- mesh = {
  --   batman_adv = {
  --    routing_algo = 'BATMAN V',
  --        BATMAN IV and V are not compatible, default IV                  
  --    gw_sel_class = 1,
  --  },
  -- },
  
  mesh_vpn = {
    enabled = true,
    mtu = 1364,
    -- Preparation for switch to tunneldigger
    tunneldigger = {
      brokers = {
        'fgw01.freifunk-rhein-sieg.net:20011',
        'fgw02.freifunk-rhein-sieg.net:20011',
        'fgw03.freifunk-rhein-sieg.net:20011',
        'fgw04.freifunk-rhein-sieg.net:20011',
      },
    },

    fastd = {
      configurable = true,
      methods = {
        'salsa2012+umac',
        'salsa2012+gmac',
      },
      groups = {
        backbone = {
          limit = 1,
          peers = {
            wupper0 = {
              key = 'e52daa654abcf5c20c5b7a74b5145f70a7491435c6ef334ae352e4f19c00e8f5',
              remotes = {'"0.wupper.ffrl.de" port 53757'},
            },
            wupper1 = {
              key = '6eae041199ee627689bfa026afbd8a9ab299eca8aed4144321d098cffd62668e',
              remotes = {'"1.wupper.ffrl.de" port 53757'},
            },
            wupper2 = {
              key = 'b7f319d59d8383ba813c3503416bca45f70852e4d207b1743bb6cdca1e30d9f5',
              remotes = {'"2.wupper.ffrl.de" port 53757'},
            },
            wupper3 = {
              key = 'c8f3d1d10b0d6389e39c3c3cb08adfa3123e821fd5bfd6262d2161d80ee4b06c',
              remotes = {'"3.wupper.ffrl.de" port 53757'},
            },
            wupper4 = {
              key = '5e7fa122990dbc34b8cae7ece2cd4ef919d3f8c23a674b7bbcf05bfebe6a6e8a',
              remotes = {'"4.wupper.ffrl.de" port 53757'},
            },
            wupper5 = {
              key = 'd49256cbc83e206c9afb3c8f757f1a318a18e16933b9b05015926d0849b3cd89',
              remotes = {'"5.wupper.ffrl.de" port 53757'},
            },
            wupper6 = {
              key = '6775943433146a1c16a33940805fbafa8ba0cc6ef328d66cffc0ffe2480226fa',
              remotes = {'"6.wupper.ffrl.de" port 53757'},
            },
            wupper7 = {
              key = '9916d2e9e89452ae7e1b9c58038a3b16b75e49d51afd0440d915adcdac561739',
              remotes = {'"7.wupper.ffrl.de" port 53757'},
            },
            wupper8 = {
              key = '332bfb0c3c4bba4a5c7f36721ff52f484603bf2a4a233a3776e9d4f8b9567078',
              remotes = {'"8.wupper.ffrl.de" port 53757'},
            },
            wupper9 = {
              key = '62b1b37c2343a4c0165cfb9cc8a87b65d1ffd04136aa5d24c1147f6fb1637f39',
              remotes = {'"9.wupper.ffrl.de" port 53757'},
            },
          },
        },
      },
    },
    -- new since 2016.1, former simple_tc 
    bandwidth_limit = {
    -- The bandwidth limit can be enabled by default here.
      enabled = false,

    -- Default upload limit (kbit/s).
      egress = 300,

    -- Default download limit (kbit/s).
      ingress = 5000,
    },

  },
  
  mesh_on_wan = false,
  mesh_on_lan = false,

  autoupdater = {
    enabled = true,
    branch = 'master',
    branches = {
      master = {
        name = 'master',
        mirrors = {
	  -- TP-LINK TL-WR1043v2
	  'http://[fda0:747e:ab29:2241:16cc:20ff:fecd:15bc]/fffw/master/images/sysupgrade/',
          -- TP-LINK Archer C7
	  'http://[fda0:747e:ab29:2241:a62b:b0ff:fedf:2901]/fffw/master/images/sysupgrade/'
        },
        good_signatures = 1,
        pubkeys = {
          '3905b03a3eb6201013fa9e8af5a8cfc7208ac30eb92ff253eb91785b2b58a514' -- Thomas
        },
      },
      stable = {
        name = 'stable',
        mirrors = {
	  -- TP-LINK TL-WR1043v2
	  'http://[fda0:747e:ab29:2241:16cc:20ff:fecd:15bc]/fffw/stable/images/sysupgrade/',
          -- TP-LINK Archer C7
	  'http://[fda0:747e:ab29:2241:a62b:b0ff:fedf:2901]/fffw/stable/images/sysupgrade/'
        },
        good_signatures = 1,
        pubkeys = {
          '3905b03a3eb6201013fa9e8af5a8cfc7208ac30eb92ff253eb91785b2b58a514' -- Thomas
        },
      },
      stableusb = {
        name = 'stableusb',
        mirrors = {
          'http://[fda0:747e:ab29:2241:16cc:20ff:fecd:15bc]/fffw/stableusb/images/sysupgrade/',
          -- TP-LINK Archer C7
	  'http://[fda0:747e:ab29:2241:a62b:b0ff:fedf:2901]/fffw/stableusb/images/sysupgrade/'
        },
        good_signatures = 1,
        pubkeys = {
          '3905b03a3eb6201013fa9e8af5a8cfc7208ac30eb92ff253eb91785b2b58a514' -- Thomas
        },
      },

    },
  },
  roles = {
    default = 'node',
    list = {
      'node',
      'test',
      'backbone',
      'service',
    },
  },
  setup_mode = {
    skip = true,
  },
}