116 lines
2.9 KiB
YAML
116 lines
2.9 KiB
YAML
---
|
|
debian_upgrade_target_release: trixie
|
|
debian_upgrade_target_major_version: "13"
|
|
debian_upgrade_source_major_version: "12"
|
|
|
|
debian_upgrade_reboot_timeout: 1800
|
|
|
|
router_external_interface: eth0
|
|
|
|
router_virtual_home_ip: 82.215.64.187
|
|
router_bird_vps_ip: 82.215.64.105
|
|
router_vps_ip: 82.215.64.169
|
|
|
|
router_sysctl:
|
|
net.ipv6.conf.all.forwarding: 1
|
|
net.ipv6.conf.default.forwarding: 1
|
|
net.ipv4.ip_forward: 1
|
|
|
|
bird_enable: true
|
|
bird_track: bird2
|
|
bird_package_version: 2.19.1-cznic.1~trixie
|
|
bird_router_id: 82.215.64.105
|
|
bird_local_as: 213026
|
|
bird_run_user: bird
|
|
bird_run_group: bird
|
|
bird_log_file: /var/log/bird/bird.log
|
|
bird_sbehop_gateway: 2a12:bec0:210:3::1
|
|
|
|
bird_static_routes_v6:
|
|
- prefix: 2a12:bec0:6b1::/48
|
|
via: 2a12:bec2:b00b::201
|
|
|
|
bird_reject_prefixes_v6:
|
|
- fd00:dead:beef:c0::/80
|
|
- fd4d:6169:6c69:6f77::/64
|
|
- fd7a:115c:a1e0::/48
|
|
- fd8c:c43c:133e::/64
|
|
- fd8c:c43c:133e:1::/64
|
|
- fd8c:c43c:133e:2::/64
|
|
- fd00:1::/64
|
|
- 2a12:bec2:b00b::/64
|
|
- ::10.10.10.1/128
|
|
- 2a12:bec0:210:3::/64
|
|
|
|
bird_bgp_sessions:
|
|
- name: tgj4
|
|
local_address: 172.22.10.2
|
|
local_as: 213026
|
|
neighbor_address: 172.22.10.1
|
|
neighbor_as: 199519
|
|
address_family: ipv6
|
|
export_limit: 30
|
|
import_filter: sbehop
|
|
export_filter: rt_nothanks
|
|
graceful_restart: true
|
|
- name: scaleblade6
|
|
local_address: 2a12:bec2:b00b::201
|
|
local_as: 213026
|
|
neighbor_address: 2a12:bec1::2
|
|
neighbor_as: 52041
|
|
address_family: ipv6
|
|
export_limit: 50
|
|
import_filter: rt_importv6
|
|
export_filter: rt_nothanks
|
|
graceful_restart: true
|
|
- name: ntbx
|
|
local_address: 172.18.72.1
|
|
local_as: 213026
|
|
neighbor_address: 172.18.72.2
|
|
neighbor_as: 213026
|
|
address_family: ipv6
|
|
import_limit: 20
|
|
import_filter: rt_importv6
|
|
export_filter: rt_export
|
|
|
|
wireguard_enable: true
|
|
wireguard_interfaces:
|
|
- name: wg1
|
|
description: WireGuard to pfSense
|
|
private_key_env: WG1_PRIVATEKEY
|
|
address:
|
|
- 2a12:bec0:6b1::1/64
|
|
- 172.18.72.1/30
|
|
listen_port: 51825
|
|
mtu: 1430
|
|
pre_up:
|
|
- "ip addr del 82.215.64.187/32 dev eth0 2>/dev/null || true"
|
|
- "ip neigh add proxy 82.215.64.187 dev eth0 2>/dev/null || true"
|
|
post_down:
|
|
- "ip neigh del proxy 82.215.64.187 dev eth0 2>/dev/null || true"
|
|
peers:
|
|
- public_key: SsGjCLJBKQFDuxSnVgwua77fvb/ha4KFRiJcCBk7vF0=
|
|
allowed_ips:
|
|
- 2a12:bec0:6b1::2/64
|
|
- 2a12:bec0:6b9::/48
|
|
- 172.18.72.0/30
|
|
- 82.215.64.187/32
|
|
- name: wg2
|
|
description: WireGuard to TGJ
|
|
private_key_env: WG2_PRIVATEKEY
|
|
address:
|
|
- 2a12:bec0:210:3::2/64
|
|
- 172.22.10.2/30
|
|
listen_port: 51820
|
|
mtu: 1430
|
|
peers:
|
|
- public_key: 1XaLeqKZimM1cS57dPzTSf/UGW8bThADjf+oBmRF82I=
|
|
allowed_ips:
|
|
- 2a12:bec0:21f::2/64
|
|
- 172.22.10.1/30
|
|
- 2a12:bec0:212::/48
|
|
- 2a12:bec0:210::/48
|
|
- 2a12:bec0:214::/48
|
|
endpoint: v4.router.colo.tgj.services:51869
|
|
persistent_keepalive: 25
|