blob: e9c3a927a26e528c0019c90d6549724988274281 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
---
openwrt_arch: x86
openwrt_target: geode
openwrt_profile: generic
openwrt_output_image_suffixes:
- "{{ openwrt_profile }}-ext4-combined.img.gz"
openwrt_packages_remove:
- ppp
- ppp-mod-pppoe
- firewall
- dnsmasq
- odhcpd-ipv6only
- linux-atm
- kmod-pppoa
- kmod-mppe
- ppp-mod-pppoa
- pppstats
- pppdump
- iwinfo
- soloscli
openwrt_packages_add:
- haveged
- htop
- ip
- less
- nano
- tcpdump-mini
- iperf
- iperf3
- mtr
- wireguard
openwrt_mixin:
/etc/dropbear/authorized_keys:
content: "{{ ssh_keys_root | join('\n') }}\n"
/etc/htoprc:
file: "{{ global_files_dir }}/common/htoprc"
openwrt_uci:
system:
- name: system
options:
hostname: '{{ host_name }}'
timezone: 'CET-1CEST,M3.5.0,M10.5.0/3'
ttylogin: '0'
log_size: '64'
urandom_seed: '0'
- name: timeserver 'ntp'
options:
enabled: '1'
enable_server: '0'
server:
- '0.lede.pool.ntp.org'
- '1.lede.pool.ntp.org'
- '2.lede.pool.ntp.org'
- '3.lede.pool.ntp.org'
dropbear:
- name: dropbear
options:
PasswordAuth: 'off'
RootPasswordAuth: 'off'
Port: '{{ ansible_port }}'
network:
- name: globals 'globals'
options:
ula_prefix: "fc{{ '%02x:%04x:%04x' | format((255 | random(seed=inventory_hostname + '0')), (65535 | random(seed=inventory_hostname + '1')), (65535 | random(seed=inventory_hostname + '2'))) }}::/48"
- name: interface 'loopback'
options:
device: lo
proto: static
ipaddr: 127.0.0.1
netmask: 255.0.0.0
- name: interface 'unused0'
options:
device: eth0
proto: none
- name: interface 'unused1'
options:
device: eth1
proto: none
- name: interface 'lan'
options:
device: eth2
proto: static
ipaddr: "{{ network_zones.lan.prefix | ansible.utils.ipaddr(network_zones.lan.offsets[inventory_hostname]) | ansible.utils.ipaddr('address') }}"
netmask: "{{ network_zones.lan.prefix | ansible.utils.ipaddr('netmask') }}"
gateway: "{{ network_zones.lan.gateway }}"
dns: "{{ network_zones.lan.dns }}"
|
