|
|
@@ -29,6 +29,36 @@ libuecc_repo | If building from source, from which repo to checkout the source |
|
|
|
libuecc_repo_dir | If building from source, under which directory should the local clone be created | /usr/src/
|
|
|
libuecc_build_dir | Where to create the cmake build dir, if building from source | /usr/src/libuecc-build
|
|
|
|
|
|
+### Instance variables
|
|
|
+
|
|
|
+This playbook can create configurations for multiple instances running on the same host.
|
|
|
+All instances are defined in an array under `fastd_instances`.
|
|
|
+
|
|
|
+```
|
|
|
+fastd_instances:
|
|
|
+ - name: fast-vpn # Name of the instance and the config folder under /etc/fastd
|
|
|
+ bind: any:10000 interface "eth0" default ipv4
|
|
|
+ interface: tap00
|
|
|
+ loglevel: info
|
|
|
+ mode: tap
|
|
|
+ method: salsa2012+umac
|
|
|
+ peer_limit: 125
|
|
|
+ mtu: 1280
|
|
|
+ status_socket: /tmp/fastd00.sock
|
|
|
+ on_up_script: |
|
|
|
+ ip link set up $INTERFACE
|
|
|
+ batctl if add $INTERFACE
|
|
|
+ on_verify_script: |
|
|
|
+ /etc/fastd/fastd-blacklist.sh $PEER_KEY
|
|
|
+```
|
|
|
+The secret keys are defined in a seperate variable so you can encrypt them `fastd_instances_secret`.
|
|
|
+
|
|
|
+```
|
|
|
+fastd_instances_secret:
|
|
|
+ - name: fast-vpn
|
|
|
+ secret: 280088c4463559417e9f2daf17babc1db820ab79eb4f79e3718719b2a976e8a8b5e
|
|
|
+```
|
|
|
+
|
|
|
Dependencies
|
|
|
------------
|
|
|
|
