35 lines
1 KiB
Plaintext
35 lines
1 KiB
Plaintext
# fastd.conf
|
|
# from https://github.com/freifunk-mwu/ansible-ffmwu.git
|
|
|
|
log level warn;
|
|
hide ip addresses yes;
|
|
hide mac addresses yes;
|
|
|
|
interface "{{mf_com.abbreviation}}VPN";
|
|
method "salsa2012+umac"; # new method (faster)
|
|
|
|
# Bind to v4 and v6 interfaces
|
|
bind {{ansible_default_ipv4.address}}:{{mf_com.fastd_port}};
|
|
{% if ansible_default_ipv6.address is defined %}
|
|
bind [{{ansible_default_ipv6.address}}]:{{mf_com.fastd_port}};
|
|
{% endif %}
|
|
|
|
include "/etc/fastd/{{mf_com.abbreviation}}VPN/secret.conf";
|
|
mtu 1406; # 1492 - IPv4/IPv6 Header - fastd Header...
|
|
|
|
peer group "vpn_nodes" {
|
|
# p#eer limit 200;
|
|
include peers from "/etc/fastd/{{mf_com.abbreviation}}VPN/peers"; # servers 2 b moved out ...
|
|
{% if mf_com.xtra_peers is defined %}
|
|
{% for xtra in mf_com.xtra_peers %}
|
|
include peers from "/etc/fastd/{{mf_com.abbreviation}}VPN/{{xtra}}";
|
|
{% endfor %}
|
|
{% endif %}
|
|
}
|
|
|
|
peer group "servers" {
|
|
include peers from "/etc/fastd/{{mf_com.abbreviation}}VPN/peers/servers"; # yet 2 b filled ...
|
|
}
|
|
|
|
status socket "/var/run/fastd-{{mf_com.abbreviation}}.status";
|