|
2 | 2 |
|
3 | 3 | Profiles in use in the network Antennine, Italy https://antennine.org |
4 | 4 |
|
5 | | -## prometheus configurations: profile-antennine.org-an-metrics |
6 | | - |
7 | | -Example of required configuration when building via asu. |
8 | | -Replace pushgateway host, `<httpd_user>` and `<httpd_password>`. |
| 5 | +Common uci-defaults script used with ASU (online imagebuilder) to configure: |
| 6 | +- prometheus via the package `profile-antennine.org-an-metrics` |
| 7 | +- wireguard installing `wireguard-tools` |
9 | 8 |
|
10 | 9 | /etc/uci-defaults/99-asu-defaults |
11 | 10 | ``` |
| 11 | +hostname='LiMe-%M4%M5%M6' |
| 12 | +domain='thisnode.info' |
| 13 | +pushgateway_host='panorama.antennine.org/pushgateway' |
| 14 | +pushgateway_user='' |
| 15 | +pushgateway_password='' |
| 16 | +
|
12 | 17 | uci -q batch <<EOF |
| 18 | +set lime-node.system=lime |
| 19 | +set lime-node.system.hostname='${hostname}' |
| 20 | +set lime-node.system.domain='${domain}' |
13 | 21 | set lime-node.pushgateway=lime |
14 | | -set lime-node.pushgateway.host='panorama.antennine.org/pushgateway' |
15 | | -set lime-node.pushgateway.user='<httpd_user>' |
16 | | -set lime-node.pushgateway.password='<httpd_password>' |
| 22 | +set lime-node.pushgateway.host='${pushgateway_host}$' |
| 23 | +set lime-node.pushgateway.user='${pushgateway_user}' |
| 24 | +set lime-node.pushgateway.password='${pushgateway_password}' |
17 | 25 | commit lime-node |
18 | 26 | EOF |
19 | | -lime-config; lime-apply; wifi |
20 | | -``` |
21 | 27 |
|
22 | | -## wireguard configurations |
23 | | -https://github.com/openwrt/openwrt/issues/13211#issuecomment-2504873753 |
| 28 | +private_key='' |
| 29 | +listen_port='' |
24 | 30 |
|
25 | | -Example of required configuration when building via asu. |
26 | | -Replace at least `<server_public_key>` `<endpoint_host>` `<endpoint_port>` |
27 | | -`<client_private_key>` `<client_listen_port>`. |
| 31 | +server_public_key='' |
| 32 | +endpoint_host='' |
| 33 | +endpoint_port='' |
| 34 | +allowed_ips='192.168.0.0/16' |
28 | 35 |
|
29 | | -``` |
30 | 36 | ipv4_host=$(uci get network.lan.ipaddr | sed 's|.*\.\(.*\..*\)|\1|') |
| 37 | +ipv4_address='192.168.${ipv4_host}/16' |
31 | 38 |
|
| 39 | +# https://github.com/openwrt/openwrt/issues/13211#issuecomment-2504873753 |
32 | 40 | uci -q batch << EOF |
33 | 41 | set network.wg1=interface |
34 | 42 | set network.wg1.proto='wireguard' |
35 | 43 | set network.globals.packet_steering='1' |
36 | 44 |
|
37 | 45 | add network wireguard_wg1 |
38 | 46 | set network.@wireguard_wg1[0].description='Remote debug wg1' |
39 | | -set network.@wireguard_wg1[0].public_key='<server_public_key>' |
40 | | -add_list network.@wireguard_wg1[0].allowed_ips='192.168.0.0/16' |
| 47 | +set network.@wireguard_wg1[0].public_key='${server_public_key}' |
| 48 | +add_list network.@wireguard_wg1[0].allowed_ips='${allowed_ips}' |
41 | 49 | set network.@wireguard_wg1[0].persistent_keepalive='25' |
42 | | -set network.@wireguard_wg1[0].endpoint_host='<endpoint_host>' |
43 | | -set network.@wireguard_wg1[0].endpoint_port='<endpoint_port>' |
| 50 | +set network.@wireguard_wg1[0].endpoint_host='${endpoint_host}' |
| 51 | +set network.@wireguard_wg1[0].endpoint_port='${endpoint_port}' |
44 | 52 |
|
45 | | -set network.wg1.private_key='<client_private_key>' |
46 | | -set network.wg1.listen_port='<client_listen_port>' |
47 | | -add_list network.wg1.addresses='192.168.${ipv4_host}/16' |
| 53 | +set network.wg1.private_key='${private_key}' |
| 54 | +set network.wg1.listen_port='${listen_port}' |
| 55 | +add_list network.wg1.addresses='${ipv4_address}' |
48 | 56 | set network.wg1.nohostroute='1' |
49 | 57 |
|
50 | 58 | add network route |
51 | 59 | set network.@route[-1].interface='wg1' |
52 | | -set network.@route[-1].target='192.168.0.0/16' |
| 60 | +set network.@route[-1].target='${allowed_ips}' |
53 | 61 | commit network |
54 | 62 | EOF |
55 | 63 |
|
56 | | -lime-config; lime-apply; wifi |
| 64 | +lime-config; lime-apply; |
| 65 | +exit 0 |
57 | 66 | ``` |
0 commit comments