supernode_pkg_vars.yml 4.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192
  1. supernode_mesh_mac: 96:48:76:b5:a3:61
  2. supernode_mesh_ipv4: 10.42.0.1/16
  3. supernode_as: '65403'
  4. supernode_bat_macaddress: f2:43:13:c0:d7:06
  5. supernode_mesh_ipv6: 2a03:2260:50:5::8/64
  6. supernode_local_ip: "{{ansible_default_ipv4.address}}"
  7. supernode_other_nameserver: 10.42.0.23
  8. supernode_other_ntp_server: 10.42.0.23
  9. supernode_dhcp_range_start: 10.42.9.1
  10. supernode_dhcp_range_end: 10.42.45.25
  11. supernode_mesh_backbones:
  12. - name: node02
  13. comment: Non existant mesh backbone
  14. remote_ip: 192.168.0.43
  15. mesh_ip: 10.42.0.2
  16. address_v6: fd0a:1c06:d97c:e89d::2
  17. supernode_uplinks:
  18. - name: uplink1
  19. comment: Non existant uplink
  20. address: 172.16.0.1
  21. dstaddr: 172.16.0.2
  22. netmask: 255.255.255.252
  23. endpoint: 192.168.0.23
  24. address_v6: fd0a:1c06:d97c:e88d::2/64
  25. #adress_v6_pure: fd0a:1c06:d97c:e88d::2
  26. as: '65079'
  27. fastd_instances:
  28. - name: do00
  29. bind: any:10000 interface "eth0" default ipv4
  30. interface: tap00
  31. loglevel: info
  32. mode: tap
  33. method: salsa2012+umac
  34. peer_limit: 125
  35. mtu: 1280
  36. status_socket: /tmp/fastd00.sock
  37. on_up_script: |
  38. ip link set up $INTERFACE
  39. batctl if add $INTERFACE
  40. on_verify_script: |
  41. /etc/fastd/fastd-blacklist.sh $PEER_KEY
  42. - name: do01
  43. bind: any:10001 interface "eth0" default ipv4
  44. interface: tap01
  45. loglevel: info
  46. mode: tap
  47. method: salsa2012+umac
  48. peer_limit: 125
  49. mtu: 1280
  50. status_socket: /tmp/fastd01.sock
  51. on_up_script: |
  52. ip link set up $INTERFACE
  53. batctl if add $INTERFACE
  54. on_verify_script: |
  55. /etc/fastd/fastd-blacklist.sh $PEER_KEY
  56. fastd_instances_secret:
  57. - name: do00
  58. secret: 280088c4263359417e9f2daf1771db820ab79eb4f79e3718719b2a976e8a8b5e
  59. - name: do01
  60. secret: 280088c4263359417e9f2daf1771db820ab79eb4f79e3718719b2a976e8a8b5e
  61. bird_router_id: "{{supernode_mesh_ipv4}}"
  62. bird_templates:
  63. - header: bgp ibgp
  64. content: |
  65. local as 65403;
  66. import all;
  67. export all;
  68. next hop self;
  69. multihop 64;
  70. bird_protocols:
  71. - header: kernel
  72. content: |
  73. device routes;
  74. import all;
  75. export all;
  76. kernel table 42;
  77. - header: device
  78. content: scan time 8;
  79. - header: direct
  80. content: interface "*";
  81. - header: bgp ffrg11 from ibgp
  82. content: |
  83. source address 10.0.6.6;
  84. neighbor 10.0.6.5 as 65079;
  85. default bgp_med 2;
  86. - header: bgp ffrg25 from ibgp
  87. content: |
  88. source address 10.0.6.2;
  89. neighbor 10.0.6.1 as 65079;
  90. default bgp_med 1;
  91. - header: bgp node012 from ibgp
  92. content: |
  93. source address 10.233.8.1;
  94. neighbor 10.233.24.1 as 65403;
  95. default bgp_med 4;
  96. - header: bgp node021 from ibgp
  97. content: |
  98. source address 10.233.8.1;
  99. neighbor 10.233.16.1 as 65403;
  100. default bgp_med 3;
  101. - header: bgp node022 from ibgp
  102. content: |
  103. source address 10.233.8.1;
  104. neighbor 10.233.32.1 as 65403;
  105. default bgp_med 4;
  106. - header: bgp map from ibgp
  107. content: |
  108. source address 10.233.8.1;
  109. neighbor 10.233.0.1 as 65403;
  110. default bgp_med 4;
  111. bird6_router_id: "{{supernode_mesh_ipv4}}"
  112. bird6_templates:
  113. - header: bgp ibgp
  114. content: |
  115. source address 2a03:2260:50:5::8;
  116. local as 65403;
  117. import all;
  118. export all;
  119. next hop self;
  120. direct;
  121. gateway direct;
  122. - header: bgp uplink
  123. content: |
  124. local as 65403;
  125. import all;
  126. export all;
  127. next hop self;
  128. direct;
  129. multihop 64;
  130. bird6_protocols:
  131. - header: static uplink_hostroute
  132. content: |
  133. import all;
  134. export all;
  135. - header: direct
  136. content: interface "*";
  137. - header: kernel
  138. content: |
  139. persist;
  140. device routes;
  141. scan time 20;
  142. import all;
  143. export all;
  144. kernel table 42;
  145. - header: device
  146. content: scan time 10;
  147. - header: bgp ffrg11 from uplink
  148. content: |
  149. neighbor 2a03:2260:50:5b::1 as 65079;
  150. default bgp_med 2;
  151. - header: bgp ffrg25 from uplink
  152. content: |
  153. neighbor 2a03:2260:50:5a::1 as 65079;
  154. default bgp_med 1;
  155. - header: bgp node012 from ibgp
  156. content: |
  157. neighbor 2a03:2260:50:5::24 as 65403;
  158. default bgp_med 4;
  159. - header: bgp node021 from ibgp
  160. content: |
  161. neighbor 2a03:2260:50:5::16 as 65403;
  162. default bgp_med 3;
  163. - header: bgp node022 from ibgp
  164. content: |
  165. neighbor 2a03:2260:50:5::32 as 65403;
  166. default bgp_med 4;
  167. - header: bgp map from ibgp
  168. content: |
  169. neighbor 2a03:2260:50:5::1 as 65403;
  170. default bgp_med 4;
  171. supernode_interfaces:
  172. - name: eth0
  173. auto: true
  174. proto: inet
  175. type: dhcp
  176. usermanage_usersdb:
  177. fritz:
  178. comment: "Fritz Brinkhoffs"
  179. state: "present"
  180. keys:
  181. - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCfO2TgNUMcY9K8N9SsAU/LfVtlloO50n6NRxDER8dCi+t1ydalTbNdEj52cIjqvIEn458cCxdCwsNYeWqSVggX7vT7a+DgYZlJcRteHcb0lPYZplPuiZe3AUE9rHH48W4xEopv7J8Wz6hLng6Gb0TQx9HeVybQ5dn6CGyt8sOCKQ== Fritz Brinkhoffs"