kunsi/bundlewrap
1
0
Fork 0
Code Issues 1 Pull requests Releases Activity

add revision-dect-vpn

Browse source
This commit is contained in:
Franzi 2025-04-04 15:00:05 +02:00
parent 1f120b9923
commit fd1ad352d0
Signed by: kunsi
GPG key ID: 12E3D2136B818350
3 changed files with 35 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
libs/s2s.py
View file

@ -5,7 +5,7 @@ AS_NUMBERS = {
'home': 4290000138, 'home': 4290000138,
'htz-cloud': 4290000137, 'htz-cloud': 4290000137,
'ionos': 4290000002, 'ionos': 4290000002,
'glauca': 4290207960, 'revision': 4290000078,
} }
WG_AUTOGEN_NODES = [ WG_AUTOGEN_NODES = [

8
nodes/htz-cloud/wireguard.py
View file

@ -51,6 +51,7 @@ nodes['htz-cloud.wireguard'] = {
'50-wireguard': [ '50-wireguard': [
'udp dport 1194 accept', 'udp dport 1194 accept',
'udp dport 51800 accept', 'udp dport 51800 accept',
'udp dport 51804 accept',
# wg.c3voc.de # wg.c3voc.de
'udp dport 51801 ip saddr 185.106.84.42 accept', 'udp dport 51801 ip saddr 185.106.84.42 accept',
@ -117,6 +118,13 @@ nodes['htz-cloud.wireguard'] = {
'psk': vault.decrypt('encrypt$gAAAAABnc7LZSHWmOOQJpbtnpMn9QuWnbiB-6rShwgqbilVd45GzkUwOfEHBw28P_TVm9XJgFiQPOIo12DdxPCzSxKRtcqzji72QCzTlze4ZYWjL-iHm7TydLcKzXOTCO42LKpkMPUgR'), 'psk': vault.decrypt('encrypt$gAAAAABnc7LZSHWmOOQJpbtnpMn9QuWnbiB-6rShwgqbilVd45GzkUwOfEHBw28P_TVm9XJgFiQPOIo12DdxPCzSxKRtcqzji72QCzTlze4ZYWjL-iHm7TydLcKzXOTCO42LKpkMPUgR'),
'pubkey': vault.decrypt('encrypt$gAAAAABnc7LZpfAeig8yCdcZ-NegshXl-DmkJr0F2OlQR2fqhVnrfKPjgOu-5Cq09KnhdvhomGx_9ZtoFS_3OsVqcFHEasBh27aQN41xZPzEN5-qIPQRnmVoTHpufcU6tC-37Fq-PeAE'), 'pubkey': vault.decrypt('encrypt$gAAAAABnc7LZpfAeig8yCdcZ-NegshXl-DmkJr0F2OlQR2fqhVnrfKPjgOu-5Cq09KnhdvhomGx_9ZtoFS_3OsVqcFHEasBh27aQN41xZPzEN5-qIPQRnmVoTHpufcU6tC-37Fq-PeAE'),
}, },
'revision-dect-vpn': {
'endpoint': None,
'exclude_from_monitoring': True,
'my_port': 51804,
'my_ip': '172.19.136.66',
'their_ip': '172.19.136.67',
},
}, },
}, },
}, },

26
nodes/revision-dect-vpn.toml Normal file
View file

@ -0,0 +1,26 @@
hostname = "10.1.3.252"
bundles = ["bird", "wireguard"]
groups = ["debian-bookworm"]
[metadata]
location = "revision"
icinga_options.exclude_from_monitoring = true
[metadata.bird]
static_routes = [
"10.1.3.0/24",
]
[metadata.interfaces.ens18]
ips = ["10.1.3.252/24"]
gateway4 = "10.1.3.1"
[metadata.nftables.postrouting]
"50-router" = [
"oifname ens18 masquerade",
]
[metadata.wireguard.peers."htz-cloud.wireguard"]
my_port = 51804
my_ip = "172.19.136.67"
their_ip = "172.19.136.66"