Update tinc/lixonet/tinc.conf.tmpl

tinc/lixonet/tinc.conf.tmpl

@@ -9,33 +9,41 @@
 Name = ${name}
 
 # Do not change these.  Lixonet runs over port 9993 by standard.
-{{ if listen_address }}
-BindToAddress ${listen_address}
+{{ if len "${tinc_bind_interface:-}" }}
+BindToInterface ${tinc_bind_interface}
 {{ end }}
-{{ if listen_interface }}
-BindToInterface ${listen_interface}
+{{ if tinc_bind_address }}
+BindToAddress ${tinc_bind_address}
 {{ end }}
-Port = 9994
+Port = ${tinc_bind_port:-9994}
 
 # Device is named "lixonet" by Tinc and visible directly in host kernel
-DeviceType = tap
-Device = /dev/net/tun
-Mode = switch
-AddressFamily = ipv4
+DeviceType = ${tinc_device_type:tap}
+Device = ${tinc_device:/dev/net/tun}
+Mode = ${tinc_mode:switch}
+AddressFamily = ${tinc_address_family:ipv4}
 
 # Default over-the-wire security for Lixonet.
 # Blowfish: https://en.wikipedia.org/wiki/Blowfish_(cipher)
 # SHA1: https://en.wikipedia.org/wiki/SHA-1
-Cipher = blowfish
-Digest = sha1
+Cipher = ${tinc_cipher:blowfish}
+Digest = ${tinc_digest:sha1}
 
 # When this option is enabled, packets that cannot be sent directly to the
 # estination node, but which would have to be forwarded by an intermediate node,
 # are dropped instead. When combined with the IndirectData option, packets for
 # nodes for which we do not have a meta connection with are also dropped.
-DirectOnly = yes
+DirectOnly = ${tinc_direct_only:yes}
 
+
+{{ if len "${tinc_connect_to:-}" }}
+# Custom connect-to list
+{{ range "$tinc_connect_to" | split "," }}
+ConnectTo = {{.}}
+{{ end }}
+{{ else }}
 # In the following section, list backbone/core Lxn3 nodes to connect to at boot
 ConnectTo = denco_mane_lixo
 ConnectTo = phxaz_nurd_lixo
 ConnectTo = daltx_nurd_lixo
+{{ end }}