site.conf

-- This is an example site configuration for Gluon v2021.1.1
--
-- Take a look at the documentation located at
-- https://gluon.readthedocs.io/ for details.
--
-- This configuration will not work as is. Youre required to make
-- community specific changes to it!
{
  -- Used for generated hostnames, e.g. freifunk-abcdef123456. (optional)
  hostname_prefix = 'ffbsee-',

  -- Name of the community.
  site_name = 'Freifunk Bodensee',

  -- Shorthand of the community.
  site_code = 'ffbsee',

  -- 32 bytes of random data, encoded in hexadecimal
  -- This data must be unique among all sites and domains!
  -- Can be generated using: echo $(hexdump -v -n 32 -e '1/1 "%02x"' </dev/urandom)
  domain_seed = '13d0ffb5ee03019b1c30b59ecaf43b0bb2b33218c8e80505fee0fb297ddc1c4f',

  -- Prefixes used within the mesh.
  -- prefix6 is required, prefix4 can be omitted if next_node.ip4
  -- is not set.
  prefix4 = '10.15.224.0/20',
  prefix6 = 'fdef:1701:b5ee:23::/64',

  -- Timezone of your community.
  -- See https://openwrt.org/docs/guide-user/base-system/system_configuration#time_zones
  timezone = 'CET-1CEST,M3.5.0,M10.5.0/3',

  -- List of NTP servers in your community.
  -- Must be reachable using IPv6!
  ntp_servers = {'de.pool.ntp.org'},

  -- Wireless regulatory domain of your community.
  regdom = 'DE',

  -- Wireless configuration for 2.4 GHz interfaces.
  wifi24 = {
    -- Wireless channel.
    channel = 1,

    -- ESSIDs used for client network.
    ap = {
      ssid = 'Breifunk',
      -- disabled = true, -- (optional)

      -- Configuration for a backward compatible OWE network below.
      -- owe_ssid = 'owe.alpha-centauri.freifunk.net', -- (optional - SSID for OWE client network)
      -- owe_transition_mode = true, -- (optional - enables transition-mode - requires ssid as well as owe_ssid)
    },

    mesh = {
      -- Adjust these values!
      id = 'ffbsee_mesh5', -- usually you dont want users to connect to this mesh-SSID, so use a cryptic id that no one will accidentally mistake for the client WiFi
      mcast_rate = 12000,
      -- disabled = true, -- (optional)
    },
  },

  -- Wireless configuration for 5 GHz interfaces.
  -- This should be equal to the 2.4 GHz variant, except
  -- for channel.
  wifi5 = {
    channel = 36,
    ap = {
      ssid = 'Breifunk',
    },
    mesh = {
      -- Adjust these values!
      id = 'ffbsee_mesh5',
      mcast_rate = 12000,
    },
  },

  mesh = {
    vxlan = false,
    batman_adv = {
      routing_algo = 'BATMAN_V',
      gw_sel_class = 1,
    },
  },

  -- we need dns servers since a ffbsee gw do not have dns and does not send dns servers with dhcp
  -- for ipv4 servers to work here you need a small patch for gluon at the moment
  dns = {
    servers = {
      '2606:4700:4700::1111',
      '2620:fe::fe',
      '1.1.1.1',
      '9.9.9.9'
    },
  },

  -- The next node feature allows clients to always reach the node it is
  -- connected to using a known IP address.
  next_node = {
    -- anycast IPs of all nodes
    name = { 'nextnode.ffbsee', 'nextnode', 'nn' },
    ip4 = '10.15.239.127',
    ip6 = 'fdef:1701:b5ee:23::0',
  },

  -- Options specific to routing protocols (optional)
  -- mesh = {
    -- Options specific to the batman-adv routing protocol (optional)
    -- batman_adv = {
      -- Gateway selection class (optional)
      -- The default class 20 is based on the link quality (TQ) only,
      -- class 1 is calculated from both the TQ and the announced bandwidth
      -- gw_sel_class = 1,
    -- },
  -- },

  mesh_vpn = {
    enabled = true,
    -- mtu = 1312,
    mtu = 1406,

    fastd = {
      -- Refer to https://fastd.readthedocs.io/en/latest/ to better understand
      -- what these options do.

      -- List of crypto-methods to use.
      methods = {'salsa2012+umac'},
      -- configurable = true,
      -- syslog_level = 'warn',

      groups = {
        backbone = {
          -- Limit number of connected peers to reduce bandwidth.
          limit = 1,

          -- List of peers.
          peers = {
            gw01_1250 = {
              key = '7fa0b1bc37f77607ad273dbdcfd6a7a6f0c62139c969c68b1b0ce50ebaf86ce5',
              remotes = { 'ipv6 "speedtest5.gw01.ffbsee.net" port 1250',
                'ipv4 "speedtest5.gw01.ffbsee.net" port 1250'}
            },
            gw02_1250 = {
              key = '29e965b4c8cf4ccf1d2387010965d0d4fa6d2713148c9d95730ffa0e9dfadc2e',
              remotes = { 'ipv6 "speedtest5.gw02.ffbsee.net" port 1250',
                'ipv4 "speedtest5.gw02.ffbsee.net" port 1250'}
            },
            gw03_1250 = {
              key = 'b59baed600c244df6b7f58d994958d53553828f7ad37bdac8a8be207af5ca5f8',
              remotes = { 'ipv6 "speedtest5.gw03.ffbsee.net" port 1250',
                'ipv4 "speedtest5.gw03.ffbsee.net" port 1250'}
            },
            gw04_1250 = {
              key = 'ab46cf23a48111d46451e32a60c18784ec47b903a5ae7c8df1c1ca38f73857fb',
              remotes = { 'ipv6 "speedtest5.gw04.ffbsee.net" port 1250',
                'ipv4 "speedtest5.gw04.ffbsee.net" port 1250'}
            },
            gw01_1251 = {
              key = 'a5cd3a3c2a2f88a536c6876249652006645e3befdecba5948aae67ed20ad8027',
              remotes = { 'ipv6 "speedtest5.gw01.ffbsee.net" port 1251',
                'ipv4 "speedtest5.gw01.ffbsee.net" port 1251'}
            },
            gw02_1251 = {
              key = '5f63cf7b0f385c53354c79df62249063e4bf00c1de4a4fcd50fd4ed18e2a0056',
              remotes = { 'ipv6 "speedtest5.gw02.ffbsee.net" port 1251',
                'ipv4 "speedtest5.gw02.ffbsee.net" port 1251'}
            },
            gw03_1251 = {
              key = '8903b13f013f5e227c15df096642528621dc552ffbc79008531b9e687ac98183',
              remotes = { 'ipv6 "speedtest5.gw03.ffbsee.net" port 1251',
                'ipv4 "speedtest5.gw03.ffbsee.net" port 1251'}
            },
            gw04_1251 = {
              key = '3ccdbc9917f5ada551b861fc7632e63a63ab45b97cfb6090da4157da91d159a5',
              remotes = { 'ipv6 "speedtest5.gw04.ffbsee.net" port 1251',
                'ipv4 "speedtest5.gw04.ffbsee.net" port 1251'}
            },
            gw01_1252 = {
              key = '3fe5c26669f0c7efc6cb84bce89785979282a4eaafba04c6736e89f7b068fb6f',
              remotes = { 'ipv6 "speedtest5.gw01.ffbsee.net" port 1252',
                'ipv4 "speedtest5.gw01.ffbsee.net" port 1252'}
            },
            gw02_1252 = {
              key = '13350c4def16882f76ba0d8ab9c7648d08a39008eb072c351cab5e546a57c228',
              remotes = { 'ipv6 "speedtest5.gw02.ffbsee.net" port 1252',
                'ipv4 "speedtest5.gw02.ffbsee.net" port 1252'}
            },
            gw03_1252 = {
              key = '782177f5179ac359b7dd111fa23716d88e68da33147a5ebb5b4c03f50414f95a',
              remotes = { 'ipv6 "speedtest5.gw03.ffbsee.net" port 1252',
                'ipv4 "speedtest5.gw03.ffbsee.net" port 1252'}
            },
            gw04_1252 = {
              key = '26e2fffda94c713cfa122139a270aee1be5e34b41646962547fb3f1f135b384d',
              remotes = { 'ipv6 "speedtest5.gw04.ffbsee.net" port 1252',
                'ipv4 "speedtest5.gw04.ffbsee.net" port 1252'}
            },
            gw01_1253 = {
              key = '7ce66df91660b2a3d4460ee9cb4d9af7a7fba7f7cac761c5c18aad1de6acde06',
              remotes = { 'ipv6 "speedtest5.gw01.ffbsee.net" port 1253',
                'ipv4 "speedtest5.gw01.ffbsee.net" port 1253'}
            },
            gw02_1253 = {
              key = '94b4bd8d519e1ecc56170bc5d98ebd9f39e39126088315897e83f2271893f476',
              remotes = { 'ipv6 "speedtest5.gw02.ffbsee.net" port 1253',
                'ipv4 "speedtest5.gw02.ffbsee.net" port 1253'}
            },
            gw03_1253 = {
              key = 'd2c5628517397ed99a6d5d101066a801e23fe5436dea7c7a6335edf5ccb3c0c8',
              remotes = { 'ipv6 "speedtest5.gw03.ffbsee.net" port 1253',
                'ipv4 "speedtest5.gw03.ffbsee.net" port 1253'}
            },
            gw04_1253 = {
              key = '64bb84e1d3da50d84b9dda8f7eda60de9c62dedb2857090b9cb73e4d6bab61fb',
              remotes = { 'ipv6 "speedtest5.gw04.ffbsee.net" port 1253',
                'ipv4 "speedtest5.gw04.ffbsee.net" port 1253'}
            },
            gw01_1254 = {
              key = '6f4a3d8475bab1f025dc1dd01be69bb7f4b524dcb899669473a69db4f95d065f',
              remotes = { 'ipv6 "speedtest5.gw01.ffbsee.net" port 1254',
                'ipv4 "speedtest5.gw01.ffbsee.net" port 1254'}
            },
            gw02_1254 = {
              key = 'aac357c59bb35f17a24e202bb6bc83b506e767919cc60c3e5179e4ea4e7efbe5',
              remotes = { 'ipv6 "speedtest5.gw02.ffbsee.net" port 1254',
                'ipv4 "speedtest5.gw02.ffbsee.net" port 1254'}
            },
            gw03_1254 = {
              key = 'a6eed04b7540cf8d371bc00a6dd933c6b6da2ffffc4440d98fcd1bc2a588a64c',
              remotes = { 'ipv6 "speedtest5.gw03.ffbsee.net" port 1254',
                'ipv4 "speedtest5.gw03.ffbsee.net" port 1254'}
            },
            gw04_1254 = {
              key = 'b59b0084fbfc41a769330bd553b3363708f8a88846151ef4a1ed7c89f49de2cf',
              remotes = { 'ipv6 "speedtest5.gw04.ffbsee.net" port 1254',
                'ipv4 "speedtest5.gw04.ffbsee.net" port 1254'}
            },
            gw01_1255 = {
              key = '8dec2f6ef0ce19d304c2dfc86b5eeb24de8b34803204f150281a97c43e90dc62',
              remotes = { 'ipv6 "speedtest5.gw01.ffbsee.net" port 1255',
                'ipv4 "speedtest5.gw01.ffbsee.net" port 1255'}
            },
            gw02_1255 = {
              key = '9fd3eff0bda9a0c63810ea0dcfe304872879f57b64f12b45f23b9d4723a10460',
              remotes = { 'ipv6 "speedtest5.gw02.ffbsee.net" port 1255',
                'ipv4 "speedtest5.gw02.ffbsee.net" port 1255'}
            },
            gw03_1255 = {
              key = '690424fc827ec94327ad6647b1e0a5b80af597acefa974a3ee6a8ab7db3db978',
              remotes = { 'ipv6 "speedtest5.gw03.ffbsee.net" port 1255',
                'ipv4 "speedtest5.gw03.ffbsee.net" port 1255'}
            },
            gw04_1255 = {
              key = 'e748dda2e6baf2394baedb93392d3a697579d400d038351cff392ecb3e503257',
              remotes = { 'ipv6 "speedtest5.gw04.ffbsee.net" port 1255',
                'ipv4 "speedtest5.gw04.ffbsee.net" port 1255'}
            },
            gw01_1256 = {
              key = '7ba573c534ae265f13c0baac6ab93216df6d8b7dfda64259d5198e712c5a9498',
              remotes = { 'ipv6 "speedtest5.gw01.ffbsee.net" port 1256',
                'ipv4 "speedtest5.gw01.ffbsee.net" port 1256'}
            },
            gw02_1256 = {
              key = '52d7780f906897390ec538863fca1c8dfa90a0aa8cf3b838da642f210205150e',
              remotes = { 'ipv6 "speedtest5.gw02.ffbsee.net" port 1256',
                'ipv4 "speedtest5.gw02.ffbsee.net" port 1256'}
            },
            gw03_1256 = {
              key = 'a97ad93acd39dc453c36f7b3f46238dd9740e1d412aed7aac4608e094e2baf97',
              remotes = { 'ipv6 "speedtest5.gw03.ffbsee.net" port 1256',
                'ipv4 "speedtest5.gw03.ffbsee.net" port 1256'}
            },
            gw04_1256 = {
              key = '7c9f57c96db9264b6967707b1b37db78c815b07ccc57b8d172bd9c931bc5159b',
              remotes = { 'ipv6 "speedtest5.gw04.ffbsee.net" port 1256',
                'ipv4 "speedtest5.gw04.ffbsee.net" port 1256'}
            },
            gw01_1257 = {
              key = '2fe28d54badc76993e7acf71dbae04061c743af37b84c0e45890850988d95d19',
              remotes = { 'ipv6 "speedtest5.gw01.ffbsee.net" port 1257',
                'ipv4 "speedtest5.gw01.ffbsee.net" port 1257'}
            },
            gw02_1257 = {
              key = '37d00c6d6dae021e179edba76f993ccc86eee7534d48d7e55551f3fdc695a3a8',
              remotes = { 'ipv6 "speedtest5.gw02.ffbsee.net" port 1257',
                'ipv4 "speedtest5.gw02.ffbsee.net" port 1257'}
            },
            gw03_1257 = {
              key = 'bf4280e9ab6a00b0e21544a7a7aeaa5bcf1191ff4f47b62b545000189392fa35',
              remotes = { 'ipv6 "speedtest5.gw03.ffbsee.net" port 1257',
                'ipv4 "speedtest5.gw03.ffbsee.net" port 1257'}
            },
            gw04_1257 = {
              key = 'eb654b772441e2739d28db44f84f9daa8439e3bb02172f7fe845f4c8ef8a6637',
              remotes = { 'ipv6 "speedtest5.gw04.ffbsee.net" port 1257',
                'ipv4 "speedtest5.gw04.ffbsee.net" port 1257'}
            },
          },

          -- Optional: nested peer groups
          -- groups = {
            -- backbone_sub = {
              -- ...
            -- },
          -- ...
          -- },
        },
        -- Optional: additional peer groups, possibly with other limits
        -- backbone2 = {
          -- ...
        -- },
      },
    },

    bandwidth_limit = {
      -- The bandwidth limit can be enabled by default here.
      enabled = false,

      -- Default upload limit (kbit/s).
      egress = 1500,

      -- Default download limit (kbit/s).
      ingress = 9000,
    },
  },

  autoupdater = {
    -- Default branch (optional), can be overridden by setting GLUON_AUTOUPDATER_BRANCH when building.
    -- Set GLUON_AUTOUPDATER_ENABLED to enable the autoupdater by default for newly installed nodes.
    branch = 'gluon_beta',

    -- List of branches. You may define multiple branches.
    branches = {
      stable = {
        name = 'stable',

        -- List of mirrors to fetch images from. IPv6 required!
        mirrors = {'http://[fdef:1701:b5ee:23::42]/freifunk/firmware/autoupdater/batman5'},

        -- Number of good signatures required.
        -- Have multiple maintainers sign your build and only
        -- accept it when a sufficient number of them have
        -- signed it.
        good_signatures = 2,

        -- List of public keys of maintainers.
        pubkeys = {
            '9917fc356c2d9dbbcef05e94db5c69e7add4383c339355d5a2f48af64d707f4e', -- mart
            '6e3d9c98e4f7f9139c01f99b539dce45a9339f10774d2a57095822dbc7e68d4a', -- l3d
            '4bc8902befbf3f3d4c308caad02cc1efd32e0309837c9fae9f1a264e47f7faee', -- Xperimental
            'fc9ae74bdb538f39d6dd246ea901f6224daff90c2afb6b73e25d49ddb2a433b7', -- DEvil0000
            '7ed20654945876a3c482a62394f36941fa2beec31b5f43a3cac91765ffcd0642' -- Wolf
        },
      },
      gluon_beta = {
        name = 'gluon_beta',

        -- List of mirrors to fetch images from. IPv6 required!
        mirrors = {'http://[fdef:1701:b5ee:23::42]/freifunk/firmware/autoupdater/gluon_beta'},

        -- Number of good signatures required.
        -- Have multiple maintainers sign your build and only
        -- accept it when a sufficient number of them have
        -- signed it.
        good_signatures = 1,

        -- List of public keys of maintainers.
        pubkeys = {
            '9917fc356c2d9dbbcef05e94db5c69e7add4383c339355d5a2f48af64d707f4e', -- mart
            '6e3d9c98e4f7f9139c01f99b539dce45a9339f10774d2a57095822dbc7e68d4a', -- l3d
            '4bc8902befbf3f3d4c308caad02cc1efd32e0309837c9fae9f1a264e47f7faee', -- Xperimental
            'fc9ae74bdb538f39d6dd246ea901f6224daff90c2afb6b73e25d49ddb2a433b7', -- DEvil0000
            '7ed20654945876a3c482a62394f36941fa2beec31b5f43a3cac91765ffcd0642' -- Wolf
        },
      },
    },
  },

  config_mode = {
    geo_location = {
      osm = {
        center = {
          lat = 47.71233028290629,
          lon = 9.399794006605003,
        },
        zoom = 10,
      },
    },
    remote_login = {
      show_password_form = true,
      min_password_length = 10,
    },
  },

  authorized_keys = {
    'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFOtjIr9yWv8acPpfzfe4RiugZ1Vh8tRCO47sMxXP0UB alex@alex-L440',
    'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBVK87sKV+cutVEnEz0FhoxNmEiHt+hTePZO+4OAKHCC wolf@rotkaeppchen',
    'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3NwuDXiF8Js5w1jVVTP1cKe1s+1DfXe8syCwxi9shBX40eZcuREMsjWzKXytCHP5pVpQ/n91lI2/afRQKVN5RX3PdTOQmdsYKTN5cZbe0x3KDZFdZedBQDFyZ52MPI7HM/VHlgZscmElw5Z+KDf+DJyFgmtZ37P8QGplk8TQ4KbiLZi/ntxs0yBh+HVsFhU3DjV6Ju52VLiy8b3cxSuW9KI2cdGHuIz939GKWGLsSh1SRWh52ouAtP0NUA4HpdumJA1DfexcGm6Om2CSRbbCVD8iAAAqCjc3WEBaRSWe4fMXH1fON49GaKI4twypIs17tGuxJWB/xR6Qt3ZN7xxqh alex@alex-L440',
    'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjH4cPjZkfjFzkIOWuItsqaLA97IeQamdyWX/VcNas1BkpZVAlgMOHPWBVmMqP2UsWFgvhScWWMZhm4YPs5b06+3+zuRthHxTFN61S07xRW3KCwkqFOAylrp7NKWIgko02U+FDVQhOx4swxcgH2xfORd6X5B5TApWqk6SJUmoBZk4jEgRtWrDPaI3iuH0Yqr/CMS74/FevPmm0Ou4pT3zp+5KD2lFb9VO040WjPodmHuZBYSrT1R+vWCM7+/lOKVafZ9H5UTymmdl4gQOM97NzHP9JZU/ymfrLrSVs2P420BWBY4LCdc1LQqGQgUNpS1GEo5iFu7T5YWfigAf9PUqp alex@alex-L440',
  },
}