site.conf

{
  authorized_keys = {
     'ssh-rsa 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 Christoph',

     'ssh-rsa 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 Martin',
   },

  -- Used for generated hostnames, e.g. freifunk-abcdef123456. (optional)
  hostname_prefix = 'node-',

  -- Name of the community.
  site_name = 'Opennet Initiative e.V.',

  -- Shorthand of the community.
  site_code = 'oni',

  -- 32 bytes of random data, encoded in hexadecimal
  -- This data must be unique among all sites and domains!
  -- Can be generated using: echo $(hexdump -v -n 32 -e '1/1 "%02x"' </dev/urandom)
  domain_seed = '2623777b2a9edf86ce310bba99b6a77c904c32e272ff6b3515fd94007510d0f5',

  -- Prefixes used within the mesh.
  -- prefix6 is required, prefix4 can be omitted if next_node.ip4
  -- is not set.
  --prefix4             = '192.168.0.0/16',
  prefix6             = '2a0a:4580:1010:8100::/64', -- client-Netz
  node_prefix6        = '2a0a:4580:1010:8101::/64', -- infrastructure net for inter-node-communication und route-exchange
  node_client_prefix6 = 'fd32:d8d3:87da:bab2::/64', -- infrastructure net (ULA) for node-client-ip addresses

  -- Timezone of your community.
  -- See https://openwrt.org/docs/guide-user/base-system/system_configuration#time_zones
  timezone = 'CET-1CEST,M3.5.0,M10.5.0/3',

  -- List of NTP servers in your community.
  -- Must be reachable using IPv6!
  ntp_servers = { '2a0a:4580:1010:8101::1' },

  -- Wireless regulatory domain of your community.
  regdom = 'DE',

  -- Wireless configuration for 2.4 GHz interfaces.
  wifi24 = {
    -- Wireless channel.
    channel = 1,

    -- ESSIDs used for client network.
    ap = {
      ssid = 'join.babel.opennet-initiative.de',
      disabled = true,
    },

    mesh = {
      id = 'mesh.babel.opennet-initiative.de',
      mcast_rate = 12000,
      disabled = true,
    },
  },

  -- Wireless configuration for 5 GHz interfaces.
  -- This should be equal to the 2.4 GHz variant, except
  -- for channel.
  wifi5 = {
    channel = 44,
    outdoor_chanlist = '100-120 132-140',

    ap = {
      ssid = 'join.babel.opennet-initiative.de',
      disabled = true,
    },

    mesh = {
      id = 'mesh.babel.opennet-initiative.de',
      mcast_rate = 12000,
      disabled = true,
    },
  },

  mesh = {
    vxlan = true,
  },

  dns = {
    -- servers = { '2a0a:4580:1010:8000::1' },
    -- zum Testen Google DNS nutzen
    servers = { '2001:4860:4860::6464' },
  },

  -- The next node feature allows clients to always reach the node it is
  -- connected to using a known IP address.
  next_node = {
    -- anycast IPs of all nodes
    name = { 'nextnode', 'nextnode.on' },
    --ip4 = '192.168.1.1',
    --Diese IP muss aus dem prefix6 Bereich sein.
    ip6 = '2a0a:4580:1010:8100::1',
  },

  mesh_vpn = {
    -- enabled = true,
    mtu = 1312,

    fastd = {
      methods = {'salsa2012+umac'},
      configurable = true,

      groups = {
        backbone = {
          limit = 1,

          peers = {
            itsuki = {
              key = 'f2a9b6005814db2ac92c07ae3b22f67ad1d99792b825faffce379b52edc7e6ff',
              remotes = {
                'ipv4 "itsuki.opennet-initiative.de" port 10000',
              },
            },
          },
        },
      },
    },

    bandwidth_limit = {
      -- The bandwidth limit can be enabled by default here.
      enabled = false,

      -- Default upload limit (kbit/s).
      egress = 200,

      -- Default download limit (kbit/s).
      ingress = 3000,
    },
  },

  opkg = {
    extra = {
      gluon = 'https://downloads.opennet-initiative.de/gluon/oni-testing/packages/gluon-%GS-%GR/%S',
    },
  },

  autoupdater = {
    -- Default branch (optional), can be overridden by setting GLUON_AUTOUPDATER_BRANCH when building.
    -- Set GLUON_AUTOUPDATER_ENABLED to enable the autoupdater by default for newly installed nodes.
    branch = 'testing',

    -- List of branches. You may define multiple branches.
    branches = {
      testing = {
        name = 'testing',

        -- List of mirrors to fetch images from. IPv6 required!
        mirrors = { 'http://downloads.opennet-initiative.de/gluon/oni-testing/images/sysupgrade/' },

        -- Number of good signatures required.
        -- Have multiple maintainers sign your build and only
        -- accept it when a sufficient number of them have
        -- signed it.
        good_signatures = 1,

        -- List of public keys of maintainers.
        pubkeys = {
          '9c0817b136949c985c71606268f1322ad82434cb6ec76c65ae1f21f8eb487f7c', -- christoph
        },
      },
    },
  },
}