---
debian_upgrade_target_release: trixie
debian_upgrade_target_major_version: "13"
debian_upgrade_source_major_version: "12"

debian_upgrade_reboot_timeout: 1800

router_external_interface: eth0

router_virtual_home_ip: 82.215.64.187
router_bird_vps_ip: 82.215.64.105
router_vps_ip: 82.215.64.169

router_sysctl:
  net.ipv6.conf.all.forwarding: 1
  net.ipv6.conf.default.forwarding: 1
  net.ipv4.ip_forward: 1

bird_enable: true
bird_track: bird2
bird_package_version: 2.19.1-cznic.1~trixie
bird_router_id: 82.215.64.105
bird_local_as: 213026
bird_run_user: bird
bird_run_group: bird
bird_log_file: /var/log/bird/bird.log
bird_sbehop_gateway: 2a12:bec0:210:3::1

bird_static_routes_v6:
  - prefix: 2a12:bec0:6b1::/48
    via: 2a12:bec2:b00b::201

bird_reject_prefixes_v6:
  - fd00:dead:beef:c0::/80
  - fd4d:6169:6c69:6f77::/64
  - fd7a:115c:a1e0::/48
  - fd8c:c43c:133e::/64
  - fd8c:c43c:133e:1::/64
  - fd8c:c43c:133e:2::/64
  - fd00:1::/64
  - 2a12:bec2:b00b::/64
  - ::10.10.10.1/128
  - 2a12:bec0:210:3::/64

bird_bgp_sessions:
  - name: tgj4
    local_address: 172.22.10.2
    local_as: 213026
    neighbor_address: 172.22.10.1
    neighbor_as: 199519
    address_family: ipv6
    export_limit: 30
    import_filter: sbehop
    export_filter: rt_nothanks
    graceful_restart: true
  - name: scaleblade6
    local_address: 2a12:bec2:b00b::201
    local_as: 213026
    neighbor_address: 2a12:bec1::2
    neighbor_as: 52041
    address_family: ipv6
    export_limit: 50
    import_filter: rt_importv6
    export_filter: rt_nothanks
    graceful_restart: true
  - name: ntbx
    local_address: 172.18.72.1
    local_as: 213026
    neighbor_address: 172.18.72.2
    neighbor_as: 213026
    address_family: ipv6
    import_limit: 20
    import_filter: rt_importv6
    export_filter: rt_export

wireguard_enable: true
wireguard_interfaces:
  - name: wg1
    description: WireGuard to pfSense
    private_key_env: WG1_PRIVATEKEY
    address:
      - 2a12:bec0:6b1::1/64
      - 172.18.72.1/30
    listen_port: 51825
    mtu: 1430
    pre_up:
      - "ip addr del 82.215.64.187/32 dev eth0 2>/dev/null || true"
      - "ip neigh add proxy 82.215.64.187 dev eth0 2>/dev/null || true"
    post_down:
      - "ip neigh del proxy 82.215.64.187 dev eth0 2>/dev/null || true"
    peers:
      - public_key: SsGjCLJBKQFDuxSnVgwua77fvb/ha4KFRiJcCBk7vF0=
        allowed_ips:
          - 2a12:bec0:6b1::2/64
          - 2a12:bec0:6b9::/48
          - 172.18.72.0/30
          - 82.215.64.187/32
  - name: wg2
    description: WireGuard to TGJ
    private_key_env: WG2_PRIVATEKEY
    address:
      - 2a12:bec0:210:3::2/64
      - 172.22.10.2/30
    listen_port: 51820
    mtu: 1430
    peers:
      - public_key: 1XaLeqKZimM1cS57dPzTSf/UGW8bThADjf+oBmRF82I=
        allowed_ips:
          - 2a12:bec0:21f::2/64
          - 172.22.10.1/30
          - 2a12:bec0:212::/48
          - 2a12:bec0:210::/48
          - 2a12:bec0:214::/48
        endpoint: v4.router.colo.tgj.services:51869
        persistent_keepalive: 25