site.conf

{
  hostname_prefix = 'Bitte ändere mich! ',
  site_name = 'Freifunk Nord',
  site_code = 'ffnord',
  
  -- Must be the same of all nodes in one mesh domain
  domain_seed = '718966471108bd550c01001f8a6f609c34507b6b8bcd5672232f5d9acddae8b4',
  
  opkg = {
    openwrt = 'http://[fd42:eb49:c0b5:4242::fd00]/openwrt/snapshots/packages/%A',
    extra = {
      gluon = 'http://[fd42:eb49:c0b5:4242::fd00]/packages/gluon-%GS-%GR/%S',
    },
  },
  
  prefix4 = '10.187.0.0/16',
  prefix6 = 'fd42:eb49:c0b5:4242::/64',
  
  -- alt-esc example:
  -- extra_prefixes6 = {
  -- '2001:db8:9::/64',
  -- '2001:db8:100::/60',
  -- },
  timezone = 'CET-1CEST,M3.5.0,M10.5.0/3', -- Europe/Berlin
  ntp_servers = {
    'fd42:eb49:c0b5:4242::fd03',
    'fd42:eb49:c0b5:4242::fd04',
  },
  
  -- Wireless regulatory domain of your community.
  regdom = 'DE',
  
  config_mode = {
    hostname = {
      optional = false,
    },
    -- Show/hide the altitude field
    geo_location = {
      show_altitude = true,
      -- for gluon-config-mode-geo-location-osm
      osm = {
        center = {
          lat = 54.367758524,
          lon = 9.343872070,
        },
        zoom = 9,
        -- the default is https://cdn.rawgit.com/openlayers/openlayers.github.io/master/en/v5.2.0
        -- openlayers_url = 'https://mirror in kiel?',
      },
    },
    -- define if the contact field is obligatory (optional)
    -- disabled in 2017.1.8
    -- owner = {
      -- optional = true
    -- },
    remote_login = {
      show_password_form = true,
      min_password_length = 16,
    },
  },
  
  -- ddhcpd = {
  --   enabled = 0,
  --   range = "10.187.124.0/22",
  -- },
  
  -- Wireless configuration for 2.4 GHz interfaces.
  wifi24 = {
    channel = 5,
    ap = {
      ssid = 'nord.freifunk.net',
      -- disabled = true, (optional)
    },
    mesh = {
      id = 'ffnord-mesh',
      mcast_rate = 12000,
      disabled = false,
    },
  },
  
  -- Wireless configuration for 5 GHz interfaces.
  -- This should be equal to the 2.4 GHz variant, except
  -- for channel.
  wifi5 = {
    channel = 44,
    -- outdoors = 'preset', -- The default setting is 'preset', which will enable outdoor mode automatically on outdoor-capable devices.
    outdoor_chanlist = "100-140",
    ap = {
      ssid = 'nord.freifunk.net',
    },
    mesh = {
      id = 'ffnord-mesh',
      mcast_rate = 12000,
      disabled = false,
    },
  },
  
  dns = {
    cacheentries = 5000,
    servers = {
      'fd42:eb49:c0b5:4242::fd03',
      'fd42:eb49:c0b5:4242::fd04',
    },
  },
  
  -- The next node feature allows clients to always reach the node it is
  -- connected to using a known IP address.
  next_node = {
    name = {
      'node.ffnord',
      'nextnode.ffnord',
      'knoten.ffnord',
      'nextnode',
      'nn',
    },
    -- anycast IPs of all nodes
    ip4 = '10.187.127.254',
    ip6 = 'fd42:eb49:c0b5:4242::ffff',
    
    -- anycast MAC of all nodes
    mac = '36:f4:54:fc:e5:22'
  },
  
  -- Options specific to routing protocols (optional)
  mesh = {
    vxlan = false,
    filter_membership_reports = true,
    -- Options specific to the batman-adv routing protocol (optional)
    batman_adv = {
      -- Gateway selection class (optional)
      -- The default class 20 is based on the link quality (TQ) only,
      -- class 1 is calculated from both the TQ and the announced bandwidth
      gw_sel_class = 1,
      routing_algo = 'BATMAN_IV',
    },
  },
  
  -- optional; Enables the mesh on the WAN port (true or false).
  -- mesh_on_wan = true,
  
  --optional; Enables the mesh on the LAN port (true or false).
  -- mesh_on_lan = true,
  
  mesh_vpn = {
    enabled = true,
    mtu = 1280,
    
    fastd = {
      --  optional add ``null`` to the ``mesh_vpn.fastd.methods`` table if you want "Performance mode" as default
      methods = {'salsa2012+umac'},
      configurable = true,
      -- syslog_level = 'warn',
      groups = {
        backbone = {
          -- Limit number of connected peers to reduce bandwidth.
          limit = 1,
          peers = {
            ffnord_vpn0 = {
              key = 'b89353ecefc044e793063b00e1d2a36a0a6758eb67d54cede8a4a2fb5365adcf',
              remotes = {'ipv4 "0.gw.freifunknord.de" port 10050', 'ipv6 "0.gw.freifunknord.de" port 10050'},
            },
            ffnord_vpn1 = {
              key = 'd23dd91241b741e7d18a19eeecaef46066b0c5777d134e338535bb6788ba8497',
              remotes = {'ipv4 "1.gw.freifunknord.de" port 10050', 'ipv6 "1.gw.freifunknord.de" port 10050'},
            },
            ffnord_vpn2 = {
              key = '8f5017ef742e0b6c4d8babbc5497e786990d23eb4b1fc51e790b06d08c46df54',
              remotes = {'ipv4 "2.gw.freifunknord.de" port 10050', 'ipv6 "2.gw.freifunknord.de" port 10050'},
            },
            ffnord_vpn3 = {
              key = 'f141ebfd40352df6862404d8ea2d4cdfdd56e4e586f6e711cf68f20522d0e075',
              remotes = {'ipv4 "3.gw.freifunknord.de" port 10050', 'ipv6 "3.gw.freifunknord.de" port 10050'},
            },
            ffnord_vpn4 = {
              key = '2bd5bb1f45f76b0c43d3ba145b162d4d08960b12f968e5a7abeb2b3400b64d05',
              remotes = {'ipv4 "4.gw.freifunknord.de" port 10050', 'ipv6 "4.gw.freifunknord.de" port 10050'},
            },
            ffnord_vpn5 = {
              key = '766c2380bb1118ccd7132ad0588a65f20242c9d1995869c1509b0e91f1fc79e0',
              remotes = {'ipv4 "5.gw.freifunknord.de" port 10050', 'ipv6 "5.gw.freifunknord.de" port 10050'},
            },
            ffnord_vpn6 = {
              key = '734913882d3592603d1c704d4e4133c12606192ebd1a49429e7d980a2ca121d0',
              remotes = {'ipv4 "6.gw.freifunknord.de" port 10050', 'ipv6 "6.gw.freifunknord.de" port 10050'},
            },
            ffnord_vpn20 = {
              key = 'e12ab3ae5955e1380cd18908edd18e006ba11fa471335ed7b2d2776401da58b0',
              remotes = {'ipv4 "20.gw.freifunknord.de" port 10050', 'ipv6 "20.gw.freifunknord.de" port 10050'},
            },
          },
        },
      },
    },
    bandwidth_limit = {
      enabled = false,
      egress = 2000,
      ingress = 4000,
    },
  },
  
  autoupdater = {
    -- Default branch. Don't forget to set GLUON_BRANCH when building!
    branch = 'stable',
    
    branches = {
      -- only one stable branch
      stable = {
        name = 'stable',
        mirrors = {
          -- List of mirrors to fetch images from. IPv6 required!
          'http://[fd42:eb49:c0b5:4242::fd00]/firmware/stable/sysupgrade/',
          'http://[fd42:eb49:c0b5:4242::fd01]/firmware/stable/sysupgrade/',
          'http://[fd42:eb49:c0b5:4242::fd02]/firmware/stable/sysupgrade/',
          'http://0.update.ffnord/firmware/stable/sysupgrade/',
          'http://1.update.ffnord/firmware/stable/sysupgrade/',
          'http://2.update.ffnord/firmware/stable/sysupgrade/',
          'http://update.freifunknord.de/stable/sysupgrade/',
        },
        good_signatures = 2,
        pubkeys = {
          'bbb814470889439c04667748c30aabf25fb800621e67544bee803fd1b342ace3', -- sargon
          '1d37eacbd70f72730b1f5aba246a6a8eab100e2d45dda0163d9ad827f70f88d4', -- gernot
          '589695821488c9acd2efc26c2fdde259b25615cbfdbb6a434e95e33fa6932023', -- Tarnatos
          '9885f836464abf3633f92701e4febeefec54f481d8b6cd39085e6ad24162ff82', -- rubo77
          '359ec3619184f1bdfe26515cf5ba2b016ba23489db2a371cbf5c3cee9d061110', -- sven (FF-FL)
          'a15a8f462b5d11982e2b5d36c1788ec48e328d54a736c217aa820b61faa0ad55', -- tSYS
        },
      },
    },
  },
  
roles = {
  default = 'node',
  list = {
    'node',
    'test',
    'backbone',
    'service',
  },
},

  ssid_changer = {
    enabled = true,
    switch_timeframe = 60,-- only once every timeframe (in minutes) the SSID will change to OFFLINE 
    -- set to 1440 to change once a day
    -- set to 1 minute to change every time the router gets offline
    first = 5,              -- the first few minutes directly after reboot within which an Offline-SSID always may be activated
    prefix = 'FF_Offline_', -- use something short to leave space for the nodename (no '~' allowed!)
    suffix = 'nodename',    -- generate the SSID with either 'nodename', 'mac' or to use only the prefix: 'none'
    
    tq_limit_enabled = false,   -- if false, the offline SSID will only be set if there is no gateway reacheable
    -- upper and lower limit to turn the offline_ssid on and off
    -- in-between these two values the SSID will never be changed to prevent it from toggeling every minute.
    tq_limit_max = 55,    -- upper limit, above that the online SSID will be used
    tq_limit_min = 45     -- lower limit, below that the offline SSID will be used
  },
}