bundlewrap/nodes/home/router.py

56 lines
1.8 KiB
Python
Raw Normal View History

2020-11-13 17:47:40 +00:00
nodes['home.router'] = {
'hostname': '172.19.138.10',
2020-11-13 20:41:24 +00:00
'bundles': {
'iptables',
2020-11-13 20:41:24 +00:00
'pppd',
},
2020-11-13 17:47:40 +00:00
'groups': set(),
'metadata': {
'interfaces': {
'enp1s0.23': {
'ips': {
'172.19.139.10/24',
},
},
'enp1s0.42': {
'ips': {
'172.19.138.10/24',
},
'gateway4': '172.19.138.1',
},
2020-11-13 20:41:24 +00:00
'enp1s0.100': {
'ignore': True,
},
2020-11-13 17:47:40 +00:00
},
'backups': {
'exclude_from_backups': True,
},
'cron': {
# Our internet provider resets the connection if you're
# connected longer than 24 hours. We install this cronjob
# to make sure we don't get disconnected randomly during the
# day.
'restart_pppd': '23 2 * * * root systemctl restart pppoe',
},
'iptables': {
'custom_rules': [
'iptables_both -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT',
'iptables_both -A FORWARD -i enp1s0.23 -o enp1s0.42 -j REJECT',
'iptables_both -A FORWARD -i enp1s0.23 -j ACCEPT',
'iptables_both -A FORWARD -i enp1s0.42 -j ACCEPT',
],
},
2020-11-13 20:41:24 +00:00
'pppd': {
'username': vault.decrypt('encrypt$gAAAAABfruZ5AZbgJ3mfMLWqIMx8o4bBRMJsDPD1jElh-vWN_gnhiuZVjrQ1-7Y6zDXNkxXiyhx8rxc2enmvo26axd7EBI8FqknCptXAPruVtDZrBCis4TE='),
'password': vault.decrypt('encrypt$gAAAAABfruaXEDkaFksFMU8g97ydWyJF8p2KcSDJJBlzaOLDsLL6oCDYjG1kMPVESOzqjn8ThtSht1uZDuMCstA-sATmLS-EWQ=='),
'interface': 'enp1s0.100',
},
2020-11-13 17:47:40 +00:00
'vm': {
'cpu': 2,
'ram': 2,
},
},
'os': 'debian',
'os_version': (10,),
}