initial commit

2026-07-08 16:38:55 +01:00
commit 3586c571f3
@@ -0,0 +1,115 @@
+---
+debian_upgrade_target_release: trixie
+debian_upgrade_target_major_version: "13"
+debian_upgrade_source_major_version: "12"
+
+debian_upgrade_reboot_timeout: 1800
+
+router_external_interface: eth0
+
+router_virtual_home_ip: 82.215.64.187
+router_bird_vps_ip: 82.215.64.105
+router_vps_ip: 82.215.64.169
+
+router_sysctl:
+  net.ipv6.conf.all.forwarding: 1
+  net.ipv6.conf.default.forwarding: 1
+  net.ipv4.ip_forward: 1
+
+bird_enable: true
+bird_track: bird2
+bird_package_version: 2.19.1-cznic.1~trixie
+bird_router_id: 82.215.64.105
+bird_local_as: 213026
+bird_run_user: bird
+bird_run_group: bird
+bird_log_file: /var/log/bird/bird.log
+bird_sbehop_gateway: 2a12:bec0:210:3::1
+
+bird_static_routes_v6:
+  - prefix: 2a12:bec0:6b1::/48
+    via: 2a12:bec2:b00b::201
+
+bird_reject_prefixes_v6:
+  - fd00:dead:beef:c0::/80
+  - fd4d:6169:6c69:6f77::/64
+  - fd7a:115c:a1e0::/48
+  - fd8c:c43c:133e::/64
+  - fd8c:c43c:133e:1::/64
+  - fd8c:c43c:133e:2::/64
+  - fd00:1::/64
+  - 2a12:bec2:b00b::/64
+  - ::10.10.10.1/128
+  - 2a12:bec0:210:3::/64
+
+bird_bgp_sessions:
+  - name: tgj4
+    local_address: 172.22.10.2
+    local_as: 213026
+    neighbor_address: 172.22.10.1
+    neighbor_as: 199519
+    address_family: ipv6
+    export_limit: 30
+    import_filter: sbehop
+    export_filter: rt_nothanks
+    graceful_restart: true
+  - name: scaleblade6
+    local_address: 2a12:bec2:b00b::201
+    local_as: 213026
+    neighbor_address: 2a12:bec1::2
+    neighbor_as: 52041
+    address_family: ipv6
+    export_limit: 50
+    import_filter: rt_importv6
+    export_filter: rt_nothanks
+    graceful_restart: true
+  - name: ntbx
+    local_address: 172.18.72.1
+    local_as: 213026
+    neighbor_address: 172.18.72.2
+    neighbor_as: 213026
+    address_family: ipv6
+    import_limit: 20
+    import_filter: rt_importv6
+    export_filter: rt_export
+
+wireguard_enable: true
+wireguard_interfaces:
+  - name: wg1
+    description: WireGuard to pfSense
+    private_key_env: WG1_PRIVATEKEY
+    address:
+      - 2a12:bec0:6b1::1/64
+      - 172.18.72.1/30
+    listen_port: 51825
+    mtu: 1430
+    pre_up:
+      - "ip addr del 82.215.64.187/32 dev eth0 2>/dev/null || true"
+      - "ip neigh add proxy 82.215.64.187 dev eth0 2>/dev/null || true"
+    post_down:
+      - "ip neigh del proxy 82.215.64.187 dev eth0 2>/dev/null || true"
+    peers:
+      - public_key: SsGjCLJBKQFDuxSnVgwua77fvb/ha4KFRiJcCBk7vF0=
+        allowed_ips:
+          - 2a12:bec0:6b1::2/64
+          - 2a12:bec0:6b9::/48
+          - 172.18.72.0/30
+          - 82.215.64.187/32
+  - name: wg2
+    description: WireGuard to TGJ
+    private_key_env: WG2_PRIVATEKEY
+    address:
+      - 2a12:bec0:210:3::2/64
+      - 172.22.10.2/30
+    listen_port: 51820
+    mtu: 1430
+    peers:
+      - public_key: 1XaLeqKZimM1cS57dPzTSf/UGW8bThADjf+oBmRF82I=
+        allowed_ips:
+          - 2a12:bec0:21f::2/64
+          - 172.22.10.1/30
+          - 2a12:bec0:212::/48
+          - 2a12:bec0:210::/48
+          - 2a12:bec0:214::/48
+        endpoint: v4.router.colo.tgj.services:51869
+        persistent_keepalive: 25