Gemeinsame Daten¶
Salt State File¶
shared.sls
# Gemeinsame Daten
dhcp:
ipv4:
subnet: '10.34.0.0'
netmask: '255.255.0.0'
gw1:
range_start: '10.34.64.0'
range_end: '10.34.79.254'
gw2:
range_start: '10.34.80.0'
range_end: '10.34.95.254'
gw3:
range_start: '10.34.96.0'
range_end: '10.34.111.254'
gw4:
range_start: '10.34.112.0'
range_end: '10.34.127.254'
gw5:
range_start: '10.34.128.0'
range_end: '10.34.143.254'
gw6:
range_start: '10.34.144.0'
range_end: '10.34.159.254'
gw7:
range_start: '10.34.160.0'
range_end: '10.34.175.254'
gw8:
range_start: '10.34.176.0'
range_end: '10.34.191.254'
gw9:
range_start: '10.34.192.0'
range_end: '10.34.207.254'
gw-hf:
range_start: '10.34.208.0'
range_end: '10.34.223.254'
ipv6:
enable: 'False'
interface_mtu: '1350'
default_lease_time: '300'
max_lease_time: '300'
min_lease_time: '300'
log_facility: 'local6'
domain_search: 'ffhf'
bind:
zones:
- 'ffhf'
- '34.10.in-addr.arpa'
- '2.5.1.5.9.4.0.2.3.f.d.f.ip6.arpa'
- 'local-marta-herford.de'
- 'audioguide.marta'
trusted:
- '127.0.0.1'
- '10.34.0.0/16'
- '::1'
- 'fdf3:2049:5152::/48'
masters: '10.34.0.32; fdf3:2049:5152::a22:20;' # das ist der MAP-Server als einziget DNS-Master ausserhalb der Gateways!
# Test Daten Dummy DNS Master
#masters: 10.34.0.2; fdf3:2049:5152::a22:2;
bird:
myas: '64866' # Freifunk Herford ASN from Freifunk Rheinland
network:
bridge:
interface: 'hfBR' # br0
netmask: '255.255.0.0'
prefix: 'fdf3:2049:5152::/64'
batman:
interface: 'hfBAT' # bat0
mesh:
interface: 'hfVPN' # tun0/tap0
exit:
interface: 'exitVPN' # tun0/tap0
intercity:
interface: 'icVPN' # tun0/tap0
fastd:
protocol: 'ipv4'
port: '1244'
socket: '/var/run/fastd.sock'
alfred:
socket: '/var/run/alfred.sock'
sock: '/var/run/alfred.sock'
sitecode: 'ffhf'
announce: True
apache:
documentroot: '/var/www/vnstat'
serveradmin: 'info@herford.freifunk.net'
sslcertificatefile: '/etc/ssl/{{ grains['id'] }}/public/cert.pem'
sslcertificatekeyfile: '/etc/ssl/{{ grains['id'] }}/private/privkey.pem'
sslcertificatechainfile: '/etc/ssl/{{ grains['id'] }}/intermediate.pem'
openssh:
sshd_config:
- 'UsePAM yes'
- 'PermitRootLogin without-password'
- 'PubkeyAuthentication yes'
ssh_auth:
user:
root:
root@ff-salt: # Sven
key: 'AAAAB3NzaC1yc2EAAAADAQABAAABAQDbxiM391fPpi7eomRqvLGzEIv3GCOBNyzBf/m2Hmv0WdU3NaCPDPcODm3TJQ37Q5ABNN94lOtA3i8n1IfhbsT4/RvlKoc8kqXDAKn0I4fUE5uSq1pDQxSLm3fSRRn3O4ppWJIDv2YLz8x/AAsDOebLVMG6dgeCU7Q2OrOmRr7z1qdoHdzSeo0wxydfeYJnT9VrFlLCEXtd+/Lc8y5rk0WsWf8BVPpIZMsXXq9BjPrJfVrWxye/k96lU2dwdStAjIVnEZ9txRgJRFGkNeG/GKuc8Q2png9n/1hFEOow6VQ7afiPDc7c67jxdsfg3Ke0MrlMAw14E4gDQ2atarEKHhVL'
enc: 'ssh-rsa'
freifunk@backups.homelinux.org: # Sven
key: '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'
enc: 'ssh-rsa'
sven@s17: # Sven
key: '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'
enc: 'ssh-rsa'
sven@ThinkPad-T430-protected: # Sven
enc: 'ssh-rsa'
key: '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'
sven@terra-1526: # Sven
key: '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'
enc: 'ssh-rsa'
sven@XinkPad-T61: # Sven
key: 'AAAAB3NzaC1yc2EAAAADAQABAAACAQC9It2o76e4kk2hDwmt9Sxf/hXgm8JlKsx1HUu+rTsUO6vdYiptaypYF0nNKKImK5VEn5RXEcYG0y5829ao4CVYadvZJBbWEv53E2qoyDwwlHWQ1ITOIzGrBc4F2gBQIvsObC0hoPLl+QH0mcMBsqOBfvyhlm1slZdQAPFEUi4bE1SlusKx/fU1Ka3swseuXE5veutg2gqSusw3nW1K8xXJFrmL8+A0PTt1TkB+9j3ZpZQ42BVUZ6hhfEeaiFZAcn8q189o0O+veLbHTdmr142fW0ge7La0YGdzGj/z2C5yH3PvpgIRyFNbCWn4w8W9EDCesmp76FxnRLg/0WrXHx4mFHYbPlEYV+obOasUADUtISjZWBM4n+HAEump8c7IqXkJuiCa/fx9E3w3o6eV8ItCDUVAJs8TbesBGShsy8CaVXmhZMBf/sKaxzokKIYlWHcUFuKWOYFSuh1yCrNvppz03DsF13fp3luuahNMUwfsaS7ZBIOdk9qFHecQT2q0MI0pCb/Ug9WOchx8ck12RjCSJJFZWlaWK7wUf7PiyICHVWzhsb5pnTKG/ugaRlsIYMbJ2gJLg0Y14tzb3eIfOwCmm95f669RTfrrLsBS/VqsOqCqKzTchD6dEeLBL0s0drDmAc3dUapdHWULf0z9NuSBw/F/0WEndf2sQr+94klfvw=='
enc: 'ssh-rsa'
sven@s10: # Sven
key: 'AAAAB3NzaC1yc2EAAAADAQABAAABAQC+UiTSagsl6Z/Re/LIaAoarxTwN2pLR0AVB9ciSQRBwbcw+nDgc/5wcwoUJHBnpOtST9266b7pkRc8isqgJP9dpLWPfl/HJLoSnuAyz7IUBmO8KG0fL16vDp7dkU/Vl17uuIQTHG2tIvD9g+ezzsfB8kTt+isBJAKagFOgi1Vk20E60P3ErDCcyoDTcB52BCpubh24Hh99Q7/5gZ9HH0HjoivDp/VIZpusOIv8y1JNSkAmreEND35UImXOWTnxWHdeHo8nMU0vJ+77aK2fZYwoB9vYKaMALy0JBB8h8kSONxgTloK8yorUbRPWVveXdSBBQNKHBKG/SNBmep86lZ6L'
enc: 'ssh-rsa'
sven@s09: # Sven
key: 'AAAAB3NzaC1yc2EAAAABIwAAAQEA6Ncid0MsK9bAtLX4jqwADdHMn6P1IbJRiYz3KjVJcziQeSlnNaEtg/aDteW2iEvPYw0PqZpk5XAwVD4RZsMfRFaUop9kIJx1K54Cx2Njo5OkcCBaXeK6cBOgVLXyo5/0OhEApM6zrIgaTtNZjURkLp00lxeBARRXjHE4us7Hxg8tCtar6Gh5K5XzEoBoUhWYAPSjhisyBCSc/eBCPvwtrAiOW5tJ1VfQ+HoJwNxnG+rbieR6TLoIUeye9ZHmMr0eNW7/KeMJdzRo9vtjU53aPH+7SLwkBEdf3HwIbCm3b9VzDDR+/1qg7VvFzj1duzv5iOBdRu3duyicW9NNkUh/1w=='
enc: 'ssh-rsa'
sven@osics5: # Sven
key: 'AAAAB3NzaC1yc2EAAAADAQABAAABAQDKQb6sb6Mi+hV/Nwfkn4PRa9n9AXXiVV3zqKDw3kOPPz6z2n/+Ekf6GFefo3yZKmyuHEz5obbh/JmOAQQhdfN5PdpXyrPsWpXLco9it5GMvDbwH99S/JguEGruAasIx0bSWUdbGJJ48F0RQayXHNaBDgJ6UvXOSKyhOBH6+L/QKwmffTieycQzQsf/+2v5gRheIUkOOu8TV1i5UzUYLHB/MaG5K9hvTOShQXorrZynv3aEqc52EDjfv9OODxD9ka+8pcbfKVDxkd8Y0ay6q9ROZrSqS1UPfo81OiSHu7K3YHBMHGLWjsYRp8mTfpPVAz8si70ehcm0Qpoo0lnY6B2v'
enc: 'ssh-rsa'
rvincent@yukikaze: # Tobias
key: 'AAAAB3NzaC1yc2EAAAADAQABAAABAQD3PcTmrvdXPm1JwGs9SmI+bMCzMfC15zjsPfE/qajijhzMiJp+tZRj1g2hIWKESxhuTojdeJ1TataUDXk56Y/IRUGoKDqPEh4T7GsMOwBOsAz5lS3OdLpORlmyYWoGkEoOxzuMcPkyvq+xIYn7sB/IbVICwusVAb5Pc3Uv6aq3OIJrQYu/tmom/fI4GzOsYmE/1u/IjM6wUyU+7xYehuaIHb6an2uAXdosV0CmMAu2KgC2k+cWssgZ4DViALzfVICXJd38VI5E8R5AKnmVXHGGZeHe4eoxc1MQucWLS1ioiZaFU9ScIn2fmMJ5oNS0wZFJT3LpqvVLriTLTuPOpby3'
enc: 'ssh-rsa'
root@yuumura: # Tobias
key: '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'
enc: 'ssh-rsa'