site-ffhh/site.conf

{
	hostname_prefix => 'freifunk',
	release => '0.4',

	prefix4 => '10.130.0.0/20',
	prefix6 => 'fdef:ffc0:3dd7::/64',

	wifi24 => {
		ssid => 'luebeck.freifunk.net',
		channel => 1,
		htmode => 'HT40+',
		mesh_ssid => '02:d1:11:37:fc:38',
		mesh_bssid => '02:d1:11:37:fc:38',
	},
	wifi5 => {
		ssid => 'luebeck.freifunk.net (5GHz)',
		channel => 44,
		htmode => 'HT40+',
		mesh_ssid => '02:d1:11:37:fc:38',
		mesh_bssid => '02:d1:11:37:fc:38',
	},

	next_node => {
		ip4 => '10.130.0.1',
		ip6 => 'fdef:ffc0:3dd7::1',

		mac => '16:41:95:40:f7:dc',
	},

	fastd_mesh_vpn => {
		enabled => 1,
		methods => ['xsalsa20-poly1305'],
		mtu => 1426,
		backbone => {
			limit => 2,
			peers => {
				burgtor => {
					key => '657af03e36ff1b8bbe5a5134982a4f110c8523a9a63293870caf548916a95a03',
					remotes => ['ipv4 "burgtor.mesh.ffhl.chaotikum.org" port 10000'],
				},
				holstentor => {
					key => '8c660f7511bf101ea1b599fe53af20e1146cd923c9e9d2a3a0d534ee75af9067',
					remotes => ['ipv4 "holstentor.mesh.ffhl.chaotikum.org" port 10000'],
				},
				huextertor => {
					key => 'a1b124f43eae4f5929850c09cda825ef35d659e3db4d7746e3d97627e9fa7238',
					remotes => ['ipv4 "huextertor.mesh.ffhl.chaotikum.org" port 10000'],
				},
				muehlentor => {
					key => 'bd4ec3cf87bb0042eed2fa121fbc402154d28fb1ae9dff9cdb71bb21892f401a',
					remotes => ['ipv4 "muehlentor.mesh.ffhl.chaotikum.org" port 10000'],
				},
			},
		},
	},

	autoupdater => {
		enabled => 1,
		branch => 'stable',
		branches => {
			stable => {
				url => 'http://[fdef:ffc0:3dd7::ffff:0]/stable/',
				probability => 0.08,
				good_signatures => 2,
				pubkeys => [
					'daa19b44bbd7033965e02088127bad9516ba0fea8f34267a777144a23ec8900c', # Linus
					'a8dd60765b07330a4bbfdf8406102befca132881a4b65f3efda32cf2d5b362d9', # Nils
				],
			},
		},
	},

	configmode => {
		msg_pubkey => <<'END',
Dies ist der öffentliche Schlüssel deines Freifunkknotens.
Bitte schicke ihn an <a href="mailto:keys@luebeck.freifunk.net">keys@luebeck.freifunk.net</a>,
um ihn auf den Freifunkservern eintragen zu lassen.
Sobald der Schlüssel eingetragen wurde, kann dein Knoten das Mesh-VPN nutzen.
END
	},
}