summaryrefslogtreecommitdiff
path: root/host_vars/fastd
blob: 1b5d430a724b78db64afb6cc92573c4f1eb5129a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
---
ansible_host: 123.123.123.123 
sites:
  - name: '<site kürzel>'
    net4: '<ipv4 netz>'
    net6: '<ipv6 netz>'
    fastd_secret: <fastd secret key>
    fastd_mesh_mac: '<mesh mac>
    fastd_port1: <erster port>
    fastd_port2: <zweiter port>
    bat_ipv6: '<ipv6>'
    bat_ipv4: <ipv4>
    dhcp_subnet: '<ipv4 netz ohne netzmaske>'
    dhcp_netmask: '<netzmaske>'
    dhcp_start: <ipv4>
    dhcp_end: <ipv4>
    wireguard_mesh_key: '< priv key >'
    wireguard_mesh_port: < wg mesh port>
    wireguard_mesh_address: '< own wg mesh ipv6 ula>'
    wireguard_mesh_peers:
      - number: <peer number>
        key: '<peer pub key>'
        address: '< peer wg mesh ipv6 ula>'
        endpoint: '< peer public ipv6 >'
        mac: '< own mac for mesh interface with peer >'
wireguard_bb_key: '< priv key >'
wireguard_bb_port: < port >
wireguard_bb_address: '< ipv6 wireguard backbone netz >'
wireguard_bb_gre_ipv4: '< ipv4 an gre tunneln >'
wireguard_bb_peers:
  - name: '< name des interfaces >'
    key: '< wireguard public key >'
    address: '< ipv6 wireguard backbone netz >'
    endpoint: '< peer public ipv6 >'
    gre_ipv4: '< peer ipv4 an gre interface >'
mullvad_country: nl
mullvad_crt: |
    -----BEGIN CERTIFICATE-----
    ...
    -----END CERTIFICATE-----
mullvad_key: |
    -----BEGIN PRIVATE KEY-----
    ...
    -----END PRIVATE KEY-----
#influx_user: <user>
#influx_password: <password>
#munin_node_plugins:
#  - name: cpu
#  - name: df
#  - name: df_inode
#  - name: dhcp-pool
#  - name: diskstats
#  - name: entropy
#  - name: fastd_peers
#    plugin: fastd_
#  - name: fastd_traffic
#    plugin: fastd_
#  - name: forks
#  - name: fw_conntrack
#  - name: fw_forwarded_local
#  - name: fw_packets
#  - name: if_bat0
#    plugin: if_
#  - name: if_err_bat0
#    plugin: if_err_
#  - name: if_ens3
#    plugin: if_
#  - name: if_err_ens3
#    plugin: if_err_
#  - name: if_ffmyk-mesh-vpn
#    plugin: if_
#  - name: if_err_ffmyk-mesh-vpn
#    plugin: if_err_
#  - name: if_mullvad
#    plugin: if_
#  - name: if_err_mullvad
#    plugin: if_err_
#  - name: interrupts
#  - name: irqstats
#  - name: load
#  - name: memory
#  - name: netstat
#  - name: nginx_request
#  - name: nginx_status
#  - name: ntp_kernel_err
#  - name: ntp_kernel_pll_freq
#  - name: ntp_kernel_pll_off
#  - name: ntp_offset
#  - name: open_files
#  - name: open_inodes
#  - name: proc_pri
#  - name: processes
#  - name: swap
#  - name: threads
#  - name: uptime
#  - name: users
#  - name: vmstat