freifunk/ansible-ffibk
9
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
ansible-ffibk/inventory/group_vars/all

678 lines
14 KiB
Plaintext
Raw Normal View History

Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
---
Increase minimum Ansible version to '2.6'. * add ansible version check to role prerequisites * add requirements.txt * update Readme.md * track minimum ansible version in variable 'ansible_version_minimum'
2018-11-09 10:43:54 +01:00
ansible_version_minimum: "2.6"
Introduce boolean var 'debug_fastd' and tag debug If debug_fastd to 'True' log level is set to debug on all fastd instances. Run the playbook with tag 'debug' to invoke only tasks changing debug settings.
2018-11-07 15:20:18 +01:00
debug_fastd: False
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
site_code: ffmwu
site_name: "Mainz, Wiesbaden und Umgebung"
as_private: 65037
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
as_public_ffrl: 201701
Role network-iptables-gateway: rename var internet_exit_mtu_ipv[4|6] to internet_exit_tcp_mss_ipv[4|6]
2017-10-04 12:55:29 +02:00
internet_exit_tcp_mss_ipv4: 1240
internet_exit_tcp_mss_ipv6: 1220
Add role network-iptables-gateway - move netfilter specific sysctl settings
2017-10-02 11:18:16 +02:00
Add role service-bird-icvpn; add python3-yaml package to server-basic role
2017-09-11 13:10:39 +02:00
icvpn_ipv4_transfer_net: 10.207.0.0/16
icvpn_ipv6_transfer_net: fec0::a:cf:0:0/96
Roles service-bird + service-bird-icvpn: Restructure bird configuration to exchange loopback addresses and announce the whole freifunk subnets instead the configured ones.
2018-10-31 20:58:56 +01:00
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
loopback_net_ipv4: 10.87.255.0/24
loopback_net_ipv6: fd86:b4dc:4b1e:00ff::/64
anycast_ipv4: 10.87.255.255/32
Inventory: shorten IPv6 anycast address
2019-03-21 11:29:04 +01:00
anycast_ipv6: fd86:b4dc:4b1e:00ff::ff/128
Roles service-bird + service-bird-icvpn: Restructure bird configuration to exchange loopback addresses and announce the whole freifunk subnets instead the configured ones.
2018-10-31 20:58:56 +01:00
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
internal_prefixes:
Roles service-bird + service-bird-icvpn: Restructure bird configuration to exchange loopback addresses and announce the whole freifunk subnets instead the configured ones.
2018-10-31 20:58:56 +01:00
- ipv4: 10.37.0.0/16
ipv6: fd37:b4dc:4b1e::/48
- ipv4: 10.56.0.0/16
ipv6: fd56:b4dc:4b1e::/48
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
- ipv4: 10.86.0.0/15
ipv6: fd86:b4dc:4b1e::/48
public_prefixes:
- ipv6: 2a03:2260:11a::/48
- ipv6: 2a03:2260:11b::/48
Roles service-bird + service-bird-icvpn: Restructure bird configuration to exchange loopback addresses and announce the whole freifunk subnets instead the configured ones.
2018-10-31 20:58:56 +01:00
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
bgp_ipv4_transfer_net_legacy: 10.37.0.0/18
bgp_ipv6_transfer_net_legacy: fd37:b4dc:4b1e::/64
split out gateway specific stuff to use roles for generic meshing servers
2018-09-09 10:26:23 +02:00
bgp_groups:
Remove dashes from group_vars names
2019-05-22 09:18:40 +02:00
- gateways
- services
- monitoring
playbooks: add ffmwu-monitoring to set up prometheus servers
2018-09-09 10:33:15 +02:00
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
wireguard_networks:
- ipv4: 10.87.253.0/31
peers:
- lotuswurzel
- spinat
port: 50000
- ipv4: 10.87.253.2/31
peers:
- lotuswurzel
- wasserfloh
port: 50001
- ipv4: 10.87.253.4/31
peers:
- lotuswurzel
- uffschnitt
port: 50002
- ipv4: 10.87.253.6/31
peers:
- lotuswurzel
- ingwer
port: 50003
- ipv4: 10.87.253.8/31
peers:
- spinat
- wasserfloh
port: 50004
- ipv4: 10.87.253.10/31
peers:
- spinat
- uffschnitt
port: 50005
- ipv4: 10.87.253.12/31
peers:
- spinat
- ingwer
port: 50006
- ipv4: 10.87.253.14/31
peers:
- ingwer
- wasserfloh
port: 50007
- ipv4: 10.87.253.16/31
peers:
- wasserfloh
- uffschnitt
port: 50008
- ipv4: 10.87.253.18/31
peers:
- ingwer
- uffschnitt
port: 50009
- ipv4: 10.87.253.20/31
peers:
- lotuswurzel
- kichererbse
port: 50010
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
- ipv4: 10.87.253.22/31
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
peers:
- spinat
- kichererbse
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
port: 50011
- ipv4: 10.87.253.24/31
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
peers:
- wasserfloh
- kichererbse
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
port: 50012
- ipv4: 10.87.253.26/31
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
peers:
- uffschnitt
- kichererbse
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
port: 50013
- ipv4: 10.87.253.28/31
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
peers:
- ingwer
- kichererbse
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
port: 50014
- ipv4: 10.87.253.30/31
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
peers:
- lotuswurzel
- suesskartoffel
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
port: 50015
- ipv4: 10.87.253.32/31
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
peers:
- spinat
- suesskartoffel
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
port: 50016
- ipv4: 10.87.253.34/31
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
peers:
- ingwer
- suesskartoffel
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
port: 50017
- ipv4: 10.87.253.36/31
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
peers:
- wasserfloh
- suesskartoffel
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
port: 50018
- ipv4: 10.87.253.38/31
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
peers:
- uffschnitt
- suesskartoffel
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
port: 50019
- ipv4: 10.87.253.40/31
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
peers:
- kichererbse
- suesskartoffel
Inventory: remove unused wireguard networks
2019-03-21 17:54:30 +01:00
port: 50020
Add linse.freifunk-mwu.de * Update Playbook dns.yml to manage linse as the external dns master server
2019-03-22 20:34:54 +01:00
- ipv4: 10.87.253.42/31
peers:
- ingwer
- linse
port: 50021
- ipv4: 10.87.253.44/31
peers:
- lotuswurzel
- linse
port: 50022
- ipv4: 10.87.253.46/31
peers:
- spinat
- linse
port: 50023
- ipv4: 10.87.253.48/31
peers:
- uffschnitt
- linse
port: 50024
- ipv4: 10.87.253.50/31
peers:
- wasserfloh
- linse
port: 50025
- ipv4: 10.87.253.52/31
peers:
- suesskartoffel
- linse
port: 50026
- ipv4: 10.87.253.54/31
peers:
- kichererbse
- linse
port: 50027
Added Unfi Server to ansible. Squashed commit of the following: commit 3ba76f9e3c02e4a343c0af62ce0327dee6f2f109 Author: Julian Labus <julian@labus-online.de> Date: Thu Aug 22 13:18:05 2019 +0200 make unifi.yml executable commit 36002be43a7c1af76660682469dc7efcc06fac5f Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Thu Aug 22 13:10:32 2019 +0200 Changed magic < 255 commit c26bbac23620455653d8e21bf512c48493362d43 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Thu Aug 22 12:05:42 2019 +0200 Ergänzug um Installation von UNMS commit 220ba24e471f8139d775eec1d4b3da46e8befdf7 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Thu Aug 22 12:01:38 2019 +0200 moved service-nginx-unifi into service-unifi commit 570f5673c47b72e959e6da8940a9cbcbf1e496bf Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Thu Aug 22 11:40:27 2019 +0200 remove lean_delivery.java from unifi playbook. already in dependencies of service-unifi commit 4775cff44d53e07b720e8760f0e4ece1460e0717 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Thu Aug 22 11:38:44 2019 +0200 adjusted readme, remove galaxy info, removed unit test commit 75711495fcb40f618cd65029ceda6b3cfed7e581 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Thu Aug 22 11:32:59 2019 +0200 fix type in unifi inventory commit 513b4f6b8f3d1426e58a19ece6514e467916d680 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Thu Aug 22 11:32:44 2019 +0200 move service-unifi back to correct location commit ea32af8275fd7e6c34281e02eeb2323cbea55f64 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Thu Aug 22 11:31:42 2019 +0200 move service-unifi to temp directory commit 87698c8d84a66cbf844e923c6dd41de87cba7759 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Thu Aug 22 02:09:17 2019 +0200 Move host definition to inentory commit b469c3f6307dbed9f40310c590abc0c672487973 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Thu Aug 22 01:52:19 2019 +0200 Add unifi.yml to site.yml, remove wireguard role from unifi.yml commit 77fa3aa0eb04b01a7b10dd66cede41b09e0aa5c0 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Wed Aug 14 21:17:49 2019 +0200 Add unifi to wireguard commit c63b850ddd470aa43d8ec25663f086180157673d Author: Julian Labus <julian@labus-online.de> Date: Tue Aug 13 08:35:53 2019 +0200 Add wireguard_networks for host unifi commit 21341ad359fcfe9a9e4735ca50750f1bd5ea2ab6 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Mon Aug 12 22:49:17 2019 +0200 Add unms nginx vhost commit 0c0dff99b6ddbf8c5a354cce040b649c43948d64 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Mon Aug 12 21:44:30 2019 +0200 Add java role to gitignore commit 4fa292b5e5528b732e71dfd204ce53878cc3ee7e Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Mon Aug 12 21:43:50 2019 +0200 minor changes commit 25ab40e85e8b2fd6eb4a770e4c26a82894db3622 Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Mon Aug 12 21:17:39 2019 +0200 move java repo to requirements.yml, replace duplicated serice-nginx with service-nginx + dependency commit d9aa004149da7ac3893b698d4dcb329236a521fe Author: Sebastian Schmachtel <prisma_freifunk@oimel.net> Date: Mon Aug 12 00:52:24 2019 +0200 Added unif host: Added java role, service-unifi role, service-nginx-unifi added unifi host
2019-08-22 14:48:39 +02:00
- ipv4: 10.87.253.56/31
peers:
- unifi
- ingwer
port: 50028
- ipv4: 10.87.253.58/31
peers:
- unifi
- spinat
port: 50029
- ipv4: 10.87.253.60/31
peers:
- unifi
- uffschnitt
port: 50030
- ipv4: 10.87.253.62/31
peers:
- unifi
- lotuswurzel
port: 50031
- ipv4: 10.87.253.64/31
peers:
- unifi
- wasserfloh
port: 50032
- ipv4: 10.87.253.66/31
peers:
- unifi
- linse
port: 50033
- ipv4: 10.87.253.68/31
peers:
- unifi
- kichererbse
port: 50034
- ipv4: 10.87.253.70/31
peers:
- unifi
- suesskartoffel
port: 50035
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. * add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
fastd_groups:
Remove dashes from group_vars names
2019-05-22 09:18:40 +02:00
- gateways
- monitoring
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
playbooks: add ffmwu-monitoring to set up prometheus servers
2018-09-09 10:33:15 +02:00
prometheus_groups:
Remove dashes from group_vars names
2019-05-22 09:18:40 +02:00
- gateways
- services
- monitoring
playbooks: add ffmwu-monitoring to set up prometheus servers
2018-09-09 10:33:15 +02:00
serivce-prometheus: bind to localhost by default
2018-09-25 10:28:24 +02:00
node_exporter_opts: "--collector.systemd"
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
Add missing variables for role service-nginx-firmware
2017-10-29 21:23:04 +01:00
http_domain_internal: ffmwu.org
http_domain_external: freifunk-mwu.de
Add role service-nullmailer
2018-01-07 17:39:51 +01:00
mail_domain: freifunk-mwu.de
Inventory: add group variable for ACME (Let's Encrypt) host
2018-06-15 09:01:19 +02:00
acme_server: zuckerwatte
Inventory: add unifi_server
2019-08-22 21:26:34 +02:00
unifi_server: unifi
inventory: add git_path
2018-09-21 14:21:28 +02:00
git_path: "/home/admin/clones"
inventory: move `gopath` to all
2018-09-25 10:24:18 +02:00
gopath: "/opt/go"
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
meshes:
Inventory: add new domain dom0
2019-03-18 15:20:54 +01:00
- id: dom0
domain_number: 0
domain_code: dom0
domain_name: Domain 0
aliases:
umland: Umland
ipv4_network: 10.86.0.0/20
ipv6_ula:
- fd86:b4dc:4b1e::/64
ipv6_public:
- 2a03:2260:11a:ff::/64
batman:
it: 10000
gw: server 96mbit/96mbit
mm: 0
dat: 1
hop_penalty: 60
radvd:
maxrtradvinterval: 900
advvalidlifetime: 864000
advpreferredlifetime: 172800
iface_mtu: 1350
fastd:
nodes:
instances:
- id: 0
mtu: 1406
pass: fastd/dom0vpn
peers:
repo: https://github.com/freifunk-mwu/peers-ffmwu.git
version: master
backbone:
instances:
- id: 0
mtu: 1406
pass: fastd/dom0igvpn
Inventory: add new domains dom1: mainz dom2: wiesbaden dom3: bingen dom4: rheingau dom5: taunus dom6: limburg dom7: wielrod
2019-03-02 18:11:50 +01:00
- id: dom1
domain_number: 1
domain_code: dom1
domain_name: Domain 1
aliases:
mainz: Mainz
ipv4_network: 10.86.16.0/20
ipv6_ula:
- fd86:b4dc:4b1e:1::/64
ipv6_public:
- 2a03:2260:11a:1::/64
batman:
it: 10000
gw: server 96mbit/96mbit
mm: 0
dat: 1
hop_penalty: 60
radvd:
maxrtradvinterval: 900
advvalidlifetime: 864000
advpreferredlifetime: 172800
iface_mtu: 1350
fastd:
nodes:
instances:
- id: 0
mtu: 1406
pass: fastd/dom1vpn
peers:
repo: https://github.com/freifunk-mwu/peers-ffmwu.git
version: master
backbone:
instances:
- id: 0
mtu: 1406
pass: fastd/dom1igvpn
- id: dom2
domain_number: 2
domain_code: dom2
domain_name: Domain 2
aliases:
wiesbaden: Wiesbaden
ipv4_network: 10.86.32.0/20
ipv6_ula:
- fd86:b4dc:4b1e:2::/64
ipv6_public:
- 2a03:2260:11a:2::/64
batman:
it: 10000
gw: server 96mbit/96mbit
mm: 0
dat: 1
hop_penalty: 60
radvd:
maxrtradvinterval: 900
advvalidlifetime: 864000
advpreferredlifetime: 172800
iface_mtu: 1350
fastd:
nodes:
instances:
- id: 0
mtu: 1406
pass: fastd/dom2vpn
peers:
repo: https://github.com/freifunk-mwu/peers-ffmwu.git
version: master
backbone:
instances:
- id: 0
mtu: 1406
pass: fastd/dom2igvpn
- id: dom3
domain_number: 3
domain_code: dom3
domain_name: Domain 3
aliases:
bingen: Bingen
ipv4_network: 10.86.48.0/20
ipv6_ula:
- fd86:b4dc:4b1e:3::/64
ipv6_public:
- 2a03:2260:11a:3::/64
batman:
it: 10000
gw: server 96mbit/96mbit
mm: 0
dat: 1
hop_penalty: 60
radvd:
maxrtradvinterval: 900
advvalidlifetime: 864000
advpreferredlifetime: 172800
iface_mtu: 1350
fastd:
nodes:
instances:
- id: 0
mtu: 1406
pass: fastd/dom3vpn
peers:
repo: https://github.com/freifunk-mwu/peers-ffmwu.git
version: master
backbone:
instances:
- id: 0
mtu: 1406
pass: fastd/dom3igvpn
- id: dom4
domain_number: 4
domain_code: dom4
domain_name: Domain 4
aliases:
rheingau: Rheingau
ipv4_network: 10.86.64.0/20
ipv6_ula:
- fd86:b4dc:4b1e:4::/64
ipv6_public:
- 2a03:2260:11a:4::/64
batman:
it: 10000
gw: server 96mbit/96mbit
mm: 0
dat: 1
hop_penalty: 60
radvd:
maxrtradvinterval: 900
advvalidlifetime: 864000
advpreferredlifetime: 172800
iface_mtu: 1350
fastd:
nodes:
instances:
- id: 0
mtu: 1406
pass: fastd/dom4vpn
peers:
repo: https://github.com/freifunk-mwu/peers-ffmwu.git
version: master
backbone:
instances:
- id: 0
mtu: 1406
pass: fastd/dom4igvpn
- id: dom5
domain_number: 5
domain_code: dom5
domain_name: Domain 5
aliases:
taunus: Taunus
ipv4_network: 10.86.80.0/20
ipv6_ula:
- fd86:b4dc:4b1e:5::/64
ipv6_public:
- 2a03:2260:11a:5::/64
batman:
it: 10000
gw: server 96mbit/96mbit
mm: 0
dat: 1
hop_penalty: 60
radvd:
maxrtradvinterval: 900
advvalidlifetime: 864000
advpreferredlifetime: 172800
iface_mtu: 1350
fastd:
nodes:
instances:
- id: 0
mtu: 1406
pass: fastd/dom5vpn
peers:
repo: https://github.com/freifunk-mwu/peers-ffmwu.git
version: master
backbone:
instances:
- id: 0
mtu: 1406
pass: fastd/dom5igvpn
- id: dom6
domain_number: 6
domain_code: dom6
domain_name: Domain 6
aliases:
limburg: Limburg
ipv4_network: 10.86.96.0/20
ipv6_ula:
- fd86:b4dc:4b1e:6::/64
ipv6_public:
- 2a03:2260:11a:6::/64
batman:
it: 10000
gw: server 96mbit/96mbit
mm: 0
dat: 1
hop_penalty: 60
radvd:
maxrtradvinterval: 900
advvalidlifetime: 864000
advpreferredlifetime: 172800
iface_mtu: 1350
fastd:
nodes:
instances:
- id: 0
mtu: 1406
pass: fastd/dom6vpn
peers:
repo: https://github.com/freifunk-mwu/peers-ffmwu.git
version: master
backbone:
instances:
- id: 0
mtu: 1406
pass: fastd/dom6igvpn
- id: dom7
domain_number: 7
domain_code: dom7
domain_name: Domain 7
aliases:
weilrod: Weilrod
ipv4_network: 10.86.112.0/20
ipv6_ula:
- fd86:b4dc:4b1e:7::/64
ipv6_public:
- 2a03:2260:11a:7::/64
batman:
it: 10000
gw: server 96mbit/96mbit
mm: 0
dat: 1
hop_penalty: 60
radvd:
maxrtradvinterval: 900
advvalidlifetime: 864000
advpreferredlifetime: 172800
iface_mtu: 1350
fastd:
nodes:
instances:
- id: 0
mtu: 1406
pass: fastd/dom7vpn
peers:
repo: https://github.com/freifunk-mwu/peers-ffmwu.git
version: master
backbone:
instances:
- id: 0
mtu: 1406
pass: fastd/dom7igvpn
Migrate nested dictionary `meshes` into a list of dictionaries - migrate dictionary `ipv6` into two simple lists - migrate dictionary `forward_zones` into a list
2017-10-06 22:58:00 +02:00
- id: mz
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
legacy: true
domain_number: 37
domain_code: ffmz
Inventory: flag old domains as legacy
2019-05-13 17:14:29 +02:00
domain_name: "Mainz (legacy)"
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
aliases:
Inventory: mark old domains ffbin, ffrhg and ffta as legacy
2019-03-14 23:39:23 +01:00
ffbin: "Bingen (legacy)"
ffrhg: "Rheingau (legacy)"
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
ipv4_network: 10.37.0.0/18
Migrate nested dictionary `meshes` into a list of dictionaries - migrate dictionary `ipv6` into two simple lists - migrate dictionary `forward_zones` into a list
2017-10-06 22:58:00 +02:00
ipv6_ula:
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
- fd37:b4dc:4b1e::/64
Migrate nested dictionary `meshes` into a list of dictionaries - migrate dictionary `ipv6` into two simple lists - migrate dictionary `forward_zones` into a list
2017-10-06 22:58:00 +02:00
ipv6_public:
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
- 2a03:2260:11a::/64
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
dnssl:
- ffmz.org
- user.ffmz.org
batman:
it: 10000
gw: server 96mbit/96mbit
mm: 0
Inventory: enable DAT (Distributed ARP Table) on batadv interfaces
2018-11-12 16:25:07 +01:00
dat: 1
Restructure network interfaces in order to use ifupdown2 - rewrite interface templates for batman, fastd, ffrl and meshbridge - add package ethtool to role server-basic - use more ipaddr filters and get rid of unneeded variables in dict ffrl_exit_server - change ffrl_public_ipv4_nat variable to ip/prefix format - update readme files
2017-10-03 14:37:39 +02:00
hop_penalty: 60
Role service-radvd: make more parameters configurable
2017-10-03 21:24:36 +02:00
radvd:
maxrtradvinterval: 900
Inventory: reduce router advertisement lifetimes valid lifetime: 1 day preferred lifetime: 4 hours
2019-01-28 13:09:37 +01:00
advvalidlifetime: 86400
advpreferredlifetime: 14400
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
iface_mtu: 1350
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes
2017-10-07 00:57:35 +02:00
fastd:
nodes:
instances:
- id: 0
mtu: 1406
peers:
Iventory: update peers repos url
2018-12-12 19:52:58 +01:00
repo: https://github.com/freifunk-mwu/peers-ffmwu.git
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes
2017-10-07 00:57:35 +02:00
version: master
Rework passwordstore lookup handling in roles service-fastd-mesh und service-fastd-intragate
2017-11-12 20:27:12 +01:00
pass: fastd/mzvpn
Rename fastd instance intragate to backbone
2018-07-25 14:08:45 +02:00
backbone:
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes
2017-10-07 00:57:35 +02:00
instances:
- id: 0
mtu: 1406
peers:
repo: https://github.com/freifunk-mwu/ffmz-infrastructure-peers.git
version: master
Rework passwordstore lookup handling in roles service-fastd-mesh und service-fastd-intragate
2017-11-12 20:27:12 +01:00
pass: fastd/mzigvpn
Add missing variables for role service-nginx-firmware
2017-10-29 21:23:04 +01:00
http_domain_internal: ffmz.org
http_domain_external: freifunk-mainz.de
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
Migrate nested dictionary `meshes` into a list of dictionaries - migrate dictionary `ipv6` into two simple lists - migrate dictionary `forward_zones` into a list
2017-10-06 22:58:00 +02:00
- id: wi
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
legacy: true
domain_number: 56
domain_code: ffwi
Inventory: flag old domains as legacy
2019-05-13 17:14:29 +02:00
domain_name: "Wiesbaden (legacy)"
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
aliases:
Inventory: mark old domains ffbin, ffrhg and ffta as legacy
2019-03-14 23:39:23 +01:00
ffta: "Taunus (legacy)"
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
ipv4_network: 10.56.0.0/18
Migrate nested dictionary `meshes` into a list of dictionaries - migrate dictionary `ipv6` into two simple lists - migrate dictionary `forward_zones` into a list
2017-10-06 22:58:00 +02:00
ipv6_ula:
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
- fd56:b4dc:4b1e::/64
Migrate nested dictionary `meshes` into a list of dictionaries - migrate dictionary `ipv6` into two simple lists - migrate dictionary `forward_zones` into a list
2017-10-06 22:58:00 +02:00
ipv6_public:
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
- 2a03:2260:11b::/64
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
dnssl:
- ffwi.org
- user.ffwi.org
batman:
it: 10000
gw: server 96mbit/96mbit
mm: 0
Inventory: enable DAT (Distributed ARP Table) on batadv interfaces
2018-11-12 16:25:07 +01:00
dat: 1
Restructure network interfaces in order to use ifupdown2 - rewrite interface templates for batman, fastd, ffrl and meshbridge - add package ethtool to role server-basic - use more ipaddr filters and get rid of unneeded variables in dict ffrl_exit_server - change ffrl_public_ipv4_nat variable to ip/prefix format - update readme files
2017-10-03 14:37:39 +02:00
hop_penalty: 60
Role service-radvd: make more parameters configurable
2017-10-03 21:24:36 +02:00
radvd:
maxrtradvinterval: 900
advvalidlifetime: 864000
advpreferredlifetime: 172800
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
iface_mtu: 1350
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes
2017-10-07 00:57:35 +02:00
fastd:
nodes:
instances:
- id: 0
mtu: 1406
peers:
Iventory: update peers repos url
2018-12-12 19:52:58 +01:00
repo: https://github.com/freifunk-mwu/peers-ffmwu.git
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes
2017-10-07 00:57:35 +02:00
version: master
Rework passwordstore lookup handling in roles service-fastd-mesh und service-fastd-intragate
2017-11-12 20:27:12 +01:00
pass: fastd/wivpn
Rename fastd instance intragate to backbone
2018-07-25 14:08:45 +02:00
backbone:
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes
2017-10-07 00:57:35 +02:00
instances:
- id: 0
mtu: 1406
peers:
repo: https://github.com/freifunk-mwu/ffwi-infrastructure-peers.git
version: master
Rework passwordstore lookup handling in roles service-fastd-mesh und service-fastd-intragate
2017-11-12 20:27:12 +01:00
pass: fastd/wiigvpn
Add missing variables for role service-nginx-firmware
2017-10-29 21:23:04 +01:00
http_domain_internal: ffwi.org
http_domain_external: wiesbaden.freifunk.net
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
Add role service-tinc
2017-09-29 13:32:20 +02:00
icvpn:
prefix: mwu
Lowercase all network interface names
2017-11-06 21:24:56 +01:00
interface: icvpn
Add role service-tinc
2017-09-29 13:32:20 +02:00
icvpn_repo: https://github.com/freifunk/icvpn
Roles: improve multidomain support
2019-03-02 18:10:48 +01:00
bgp_legacy_servers:
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables
2017-09-05 12:01:27 +02:00
zuckerwatte:
ipv4: 10.37.1.2
ipv6: fd37:b4dc:4b1e::a25:102
glueckskeks:
ipv4: 10.37.1.1
ipv6: fd37:b4dc:4b1e::a25:101
Inventory: add backbone gateway extrasahne to bgp_mwu_servers
2018-02-28 17:19:57 +01:00
extrasahne:
ipv4: 10.37.0.42
ipv6: fd37:b4dc:4b1e::a25:2a
Migrate internal DNS master to PowerDNS * Add playbook dns to manage internal dns master servers * Add role to manage PowerDNS Admin Web Frontend for PowerDNS * Move dns zone related data from mesh list to a simpler dict with a simple zone list * Update role service-bind-slave * Update Readme.md * Add requirements.yml * Update .gitignore
2019-03-20 19:43:11 +01:00
Add linse.freifunk-mwu.de * Update Playbook dns.yml to manage linse as the external dns master server
2019-03-22 20:34:54 +01:00
dns_external:
slaves:
- ns1.treck.de
- ns2.treck.de
- ns3.treck.de
Migrate internal DNS master to PowerDNS * Add playbook dns to manage internal dns master servers * Add role to manage PowerDNS Admin Web Frontend for PowerDNS * Move dns zone related data from mesh list to a simpler dict with a simple zone list * Update role service-bind-slave * Update Readme.md * Add requirements.yml * Update .gitignore
2019-03-20 19:43:11 +01:00
dns_internal:
master_ipv4: 10.87.255.67
master_ipv6: fd86:b4dc:4b1e:ff::43
zones:
- ffmwu.org
- ffmz.org
- ffwi.org
- bb.ffmz.org
- bb.ffwi.org
- user.ffmz.org
- user.ffwi.org
- ffbin
- 37.10.in-addr.arpa
- 56.10.in-addr.arpa
- 86.10.in-addr.arpa
- 87.10.in-addr.arpa
- 0.0.0.0.e.1.b.4.c.d.4.b.7.3.d.f.ip6.arpa
- 0.0.0.0.e.1.b.4.c.d.4.b.6.5.d.f.ip6.arpa
- e.1.b.4.c.d.4.b.6.8.d.f.ip6.arpa
Reference in a new issue Copy permalink