supernode_pkg_vars.yml 4.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189
  1. supernode_mesh_mac: 96:48:76:b5:a3:61
  2. supernode_mesh_ipv4: 10.42.0.1
  3. supernode_mesh_net_base_ip: 10.42.0.0
  4. supernode_mesh_netmask_ipv4: 255.255.0.0
  5. supernode_bat_macaddress: f2:43:13:c0:d7:06
  6. supernode_mesh_net_cidr: 10.42.0.0/16
  7. supernode_mesh_ipv6: 2a03:2260:50:5::8/64
  8. supernode_mesh_net_ipv6: 2a03:2260:50:5::/64
  9. supernode_local_ip: "{{ansible_default_ipv4.address}}"
  10. supernode_other_nameserver: 10.42.0.23
  11. supernode_other_ntp_server: 10.42.0.23
  12. supernode_mesh_backbones:
  13. - name: test-node02
  14. comment: Non existant mesh backbone
  15. remote_ip: 192.168.0.43
  16. supernode_uplinks:
  17. - name: ffanon-uplink1
  18. comment: Non existant uplink
  19. address: 172.16.0.1
  20. dstaddr: 172.16.0.2
  21. netmask: 255.255.255.252
  22. endpoint: 192.168.0.23
  23. address_v6: fd0a:1c06:d97c:e88d::2/64
  24. fastd_instances:
  25. - name: do00
  26. bind: any:10000 interface "eth0" default ipv4
  27. interface: tap00
  28. loglevel: info
  29. mode: tap
  30. method: salsa2012+umac
  31. peer_limit: 125
  32. mtu: 1280
  33. status_socket: /tmp/fastd00.sock
  34. on_up_script: |
  35. ip link set up $INTERFACE
  36. batctl if add $INTERFACE
  37. on_verify_script: |
  38. /etc/fastd/fastd-blacklist.sh $PEER_KEY
  39. - name: do01
  40. bind: any:10001 interface "eth0" default ipv4
  41. interface: tap01
  42. loglevel: info
  43. mode: tap
  44. method: salsa2012+umac
  45. peer_limit: 125
  46. mtu: 1280
  47. status_socket: /tmp/fastd01.sock
  48. on_up_script: |
  49. ip link set up $INTERFACE
  50. batctl if add $INTERFACE
  51. on_verify_script: |
  52. /etc/fastd/fastd-blacklist.sh $PEER_KEY
  53. fastd_instances_secret:
  54. - name: do00
  55. secret: 280088c4263359417e9f2daf1771db820ab79eb4f79e3718719b2a976e8a8b5e
  56. - name: do01
  57. secret: 280088c4263359417e9f2daf1771db820ab79eb4f79e3718719b2a976e8a8b5e
  58. bird_router_id: "{{supernode_mesh_ipv4}}"
  59. bird_templates:
  60. - header: bgp ibgp
  61. content: |
  62. local as 65403;
  63. import all;
  64. export all;
  65. next hop self;
  66. multihop 64;
  67. bird_protocols:
  68. - header: kernel
  69. content: |
  70. device routes;
  71. import all;
  72. export all;
  73. kernel table 42;
  74. - header: device
  75. content: scan time 8;
  76. - header: direct
  77. content: interface "*";
  78. - header: bgp ffrg11 from ibgp
  79. content: |
  80. source address 10.0.6.6;
  81. neighbor 10.0.6.5 as 65079;
  82. default bgp_med 2;
  83. - header: bgp ffrg25 from ibgp
  84. content: |
  85. source address 10.0.6.2;
  86. neighbor 10.0.6.1 as 65079;
  87. default bgp_med 1;
  88. - header: bgp node012 from ibgp
  89. content: |
  90. source address 10.233.8.1;
  91. neighbor 10.233.24.1 as 65403;
  92. default bgp_med 4;
  93. - header: bgp node021 from ibgp
  94. content: |
  95. source address 10.233.8.1;
  96. neighbor 10.233.16.1 as 65403;
  97. default bgp_med 3;
  98. - header: bgp node022 from ibgp
  99. content: |
  100. source address 10.233.8.1;
  101. neighbor 10.233.32.1 as 65403;
  102. default bgp_med 4;
  103. - header: bgp map from ibgp
  104. content: |
  105. source address 10.233.8.1;
  106. neighbor 10.233.0.1 as 65403;
  107. default bgp_med 4;
  108. bird6_router_id: "{{supernode_mesh_ipv4}}"
  109. bird6_templates:
  110. - header: bgp ibgp
  111. content: |
  112. source address 2a03:2260:50:5::8;
  113. local as 65403;
  114. import all;
  115. export all;
  116. next hop self;
  117. direct;
  118. gateway direct;
  119. - header: bgp uplink
  120. content: |
  121. local as 65403;
  122. import all;
  123. export all;
  124. next hop self;
  125. direct;
  126. multihop 64;
  127. bird6_protocols:
  128. - header: static uplink_hostroute
  129. content: |
  130. import all;
  131. export all;
  132. - header: direct
  133. content: interface "*";
  134. - header: kernel
  135. content: |
  136. persist;
  137. device routes;
  138. scan time 20;
  139. import all;
  140. export all;
  141. kernel table 42;
  142. - header: device
  143. content: scan time 10;
  144. - header: bgp ffrg11 from uplink
  145. content: |
  146. neighbor 2a03:2260:50:5b::1 as 65079;
  147. default bgp_med 2;
  148. - header: bgp ffrg25 from uplink
  149. content: |
  150. neighbor 2a03:2260:50:5a::1 as 65079;
  151. default bgp_med 1;
  152. - header: bgp node012 from ibgp
  153. content: |
  154. neighbor 2a03:2260:50:5::24 as 65403;
  155. default bgp_med 4;
  156. - header: bgp node021 from ibgp
  157. content: |
  158. neighbor 2a03:2260:50:5::16 as 65403;
  159. default bgp_med 3;
  160. - header: bgp node022 from ibgp
  161. content: |
  162. neighbor 2a03:2260:50:5::32 as 65403;
  163. default bgp_med 4;
  164. - header: bgp map from ibgp
  165. content: |
  166. neighbor 2a03:2260:50:5::1 as 65403;
  167. default bgp_med 4;
  168. supernode_interfaces:
  169. - name: eth0
  170. auto: true
  171. proto: inet
  172. type: dhcp
  173. usermanage_usersdb:
  174. fritz:
  175. comment: "Fritz Brinkhoffs"
  176. state: "present"
  177. keys:
  178. - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCfO2TgNUMcY9K8N9SsAU/LfVtlloO50n6NRxDER8dCi+t1ydalTbNdEj52cIjqvIEn458cCxdCwsNYeWqSVggX7vT7a+DgYZlJcRteHcb0lPYZplPuiZe3AUE9rHH48W4xEopv7J8Wz6hLng6Gb0TQx9HeVybQ5dn6CGyt8sOCKQ== Fritz Brinkhoffs"