Files
site-ffmuc/site.conf
chris007de 14d3893226 Changing required number of signatures to 3 for stable and ext
Um das bereits lang angedachte (und schon ewig kommunizierte) >4 Augen Prinzip bei FW Releases einzufuehren, wird die Anzahl der benoetigten Signaturen hochgesetzt.

Dies ist auch bei Experimental Images der Fall, da Images die ueber Experimental Autoupdater ins Produktivnetz ausgerollt werden, bereits vorher in einem autarken Testbed getestet worden sein sollen.
2015-09-09 10:05:18 +02:00

170 lines
5.2 KiB
Lua

{
hostname_prefix = '',
site_name = 'Freifunk München',
site_code = 'ffmuc',
opkg_repo = 'http://openwrt.draic.info/barrier_breaker/14.07/%S/packages',
prefix4 = '10.80.0.0/16',
prefix6 = 'fdef:ffc0:4fff::/64',
timezone = 'CET-1CEST,M3.5.0,M10.5.0/3',
ntp_servers = { '0.ntp.ffmuc.net', '1.ntp.ffmuc.net' },
mesh_on_wan = false,
regdom = 'DE',
wifi24 = {
ssid = 'muenchen.freifunk.net',
channel = 6,
htmode = 'HT20',
mesh_ssid = 'mesh.ffmuc',
mesh_bssid = '02:0E:8E:1E:61:17',
mesh_mcast_rate = 12000,
},
wifi5 = {
ssid = 'muenchen.freifunk.net',
channel = 44,
htmode = 'HT40+',
mesh_ssid = 'mesh.ffmuc',
mesh_bssid = '02:0E:8E:1E:61:17',
mesh_mcast_rate = 12000,
},
next_node = {
ip4 = '10.80.0.1',
ip6 = 'fdef:ffc0:4fff::1',
mac = '16:41:95:40:f7:dc',
},
fastd_mesh_vpn = {
methods = {'salsa2012+umac'},
mtu = 1426,
groups = {
backbone = {
limit = 1,
peers = {
gw03_10000 = {
key = '4b856fca91077d08ea79f13e139c33b1d1a62e1566e0d447bbfd9cf640c74c41',
remotes = {
'ipv4 "gw03.ffmuc.net" port 10000',
'ipv4 "gw03.freifunk-muenchen.de" port 10000',
},
},
gw03_10002 = {
key = '0c76609762e99e278f2112a09046970b9025aa768d0c30c27242491453579fe7',
remotes = {
'ipv4 "gw03.ffmuc.net" port 10002',
'ipv4 "gw03.freifunk-muenchen.de" port 10002',
},
},
gw04_10000 = {
key = 'adee58f70829e6a03e568ca8273070b38c1b4cfe0beb69c53eea429646908126',
remotes = {
'ipv4 "gw04.ffmuc.net" port 10000',
'ipv4 "gw04.freifunk-muenchen.de" port 10000',
},
},
gw04_10002 = {
key = 'e6f0f50d2fa155a078316b6e3acad4595adcf453b959f85f20070c68df328065',
remotes = {
'ipv4 "gw04.ffmuc.net" port 10002',
'ipv4 "gw04.freifunk-muenchen.de" port 10002',
},
},
gw05 = {
key = '2242fe7fff1def15233a364487545e57c3c69e1b624d97bd5d72359b9851cb6e',
remotes = {
'ipv4 "gw05.ffmuc.net" port 10000',
'ipv4 "gw05.freifunk-muenchen.de" port 10000',
},
},
gw06 = {
key = 'd6834aa47a14358d804139630812276b3297e767d159c9cfd13fa6fb638000e0',
remotes = {
'ipv4 "gw06.ffmuc.net" port 10000',
'ipv4 "gw06.freifunk-muenchen.de" port 10000',
},
},
gw07 = {
key = '77b5f5189c360b245e1c934941468cc9cf57f0646465be5765593a95e54449d6',
remotes = {
'ipv4 "gw07.ffmuc.net" port 10000',
'ipv4 "gw07.freifunk-muenchen.de" port 10000',
},
},
gw08 = {
key = 'e476fb3a72365b550a23b587c0962eed362ed0c237175552b3261d22daaa2055',
remotes = {
'ipv4 "gw08.ffmuc.net" port 10000',
'ipv4 "gw08.freifunk-muenchen.de" port 10000',
},
},
gw09 = {
key = 'b86f436c9bb13b308dc92c3889fd468c46679d9df0bf4892244372ab415694d0',
remotes = {
'ipv4 "gw09.ffmuc.net" port 10000',
'ipv4 "gw09.freifunk-muenchen.de" port 10000',
},
},
gw10 = {
key = 'c04358d4818ec108fa4715e4517300cb2d0fa848dfa872770c4b8487d525e8bf',
remotes = {
'ipv4 "gw10.ffmuc.net" port 10000',
'ipv4 "gw10.freifunk-muenchen.de" port 10000',
},
},
},
},
},
},
autoupdater = {
enabled = 1,
branch = 'stable',
branches = {
stable = {
name = 'stable',
mirrors = {
'http://firmware.ffmuc.net/stable/sysupgrade/',
'http://[fdef:ffc0:4fff::130]/stable/sysupgrade/',
},
probability = 0.1,
good_signatures = 3,
pubkeys = {
'2a74ed02120a7d48bb2dc9be988b3480ed99844054b3d7f3e5d3df27d19d814b', -- ole
'7e3bd782e40189b903b3fb1e488d64b23aa04bc353b1a521b4cd50e70b299113', -- fpletz
'56c4201f6ce2994678b0142e19099dd28d6ed17775d35ca9a7f12d9235890ffc', -- chris
'2f92051ac4452d6026061e6c3719ffbd4f34ba7fbc474439fc6f857b76159bae', -- build.freifunk-muenchen.de (fpletz)
},
},
experimental = {
name = 'experimental',
mirrors = {
'http://firmware.ffmuc.net/experimental/sysupgrade/',
'http://[fdef:ffc0:4fff::130]/experimental/sysupgrade/',
},
probability = 0.5,
good_signatures = 3,
pubkeys = {
'2a74ed02120a7d48bb2dc9be988b3480ed99844054b3d7f3e5d3df27d19d814b', -- ole
'7e3bd782e40189b903b3fb1e488d64b23aa04bc353b1a521b4cd50e70b299113', -- fpletz
'56c4201f6ce2994678b0142e19099dd28d6ed17775d35ca9a7f12d9235890ffc', -- chris
'2f92051ac4452d6026061e6c3719ffbd4f34ba7fbc474439fc6f857b76159bae', -- build.freifunk-muenchen.de (fpletz)
},
},
},
},
simple_tc = {
mesh_vpn = {
ifname = 'mesh-vpn',
enabled = false,
limit_egress = 1200,
limit_ingress = 12000,
},
},
}
-- vim: set ft=lua:ts=2:sw=2:et