main.yml 1.9 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768
  1. ---
  2. # vars file for ff-supernode
  3. fastd_use_rng: true
  4. dhcp_interfaces: bat0
  5. dhcp_common_default_lease_time: 600
  6. dhcp_common_max_lease_time: 7200
  7. dhcp_common_ddns_update_style: none
  8. dhcp_common_authoritative: true
  9. dhcp_common_log_facility: local7
  10. dhcp_common_options:
  11. - wpad code 252 = text
  12. - 'wpad "\n\000"'
  13. - interface-mtu 1280
  14. dhcp_subnets:
  15. - base: "{{supernode_mesh_ipv4|ipaddr('network')}}"
  16. netmask: "{{supernode_mesh_ipv4|ipaddr('netmask')}}"
  17. routers: "{{supernode_mesh_ipv4|ipaddr('address')}}"
  18. range_start: "{{supernode_dhcp_range_start}}"
  19. range_end: "{{supernode_dhcp_range_end}}"
  20. domain_nameservers: "{{supernode_mesh_ipv4|ipaddr('address')}}, {{supernode_other_nameserver}}"
  21. ntp_servers: "{{supernode_mesh_ipv4|ipaddr('address')}}, {{supernode_other_ntp_server}}"
  22. dhcp_classes:
  23. - name: MSFT
  24. rule: 'match if substring(option vendor-class-identifier, 0, 4) = "MSFT"'
  25. options:
  26. - opt: 'dhcp-parameter-request-list = concat(option dhcp-parameter-request-list, fc)'
  27. radvd_default_interface: 'bat0'
  28. radvd_default_interface_options: |
  29. AdvSendAdvert on;
  30. IgnoreIfMissing on;
  31. MaxRtrAdvInterval 600;
  32. MinDelayBetweenRAs 10;
  33. AdvLinkMTU 1280;
  34. prefix {{supernode_mesh_ipv6|ipaddr('subnet')}}
  35. {
  36. };
  37. RDNSS {{supernode_mesh_ipv6|ipaddr('address')}}
  38. {
  39. };
  40. supervisor_services:
  41. - name: alfred
  42. command: /usr/local/sbin/alfred -i alfred0
  43. - name: batadv-vis
  44. command: /usr/local/sbin/batadv-vis -s
  45. unbound_configuration:
  46. - verbosity: 1
  47. - do-ip4: "yes"
  48. - do-ip6: "yes"
  49. - num-threads: 1
  50. - pidfile: "/var/run/unbound.pid"
  51. - logfile: "{{unbound_logfile}}"
  52. - module-config: '"iterator"'
  53. unbound_forward_zone_active : true
  54. unbound_forward_zone:
  55. - 151.80.64.190
  56. - 85.14.255.33
  57. unbound_interfaces:
  58. - 0.0.0.0
  59. - ::0
  60. unbound_access_control:
  61. - 10.233.0.0/16 allow
  62. - "2a03:2260:50:5::/64 allow"
  63. - "fe80::/10 allow"