#         __      _____ __  
# |  |\_//  \|\ ||_  |   _) 
# |__|/ \\__/| \||__ |  __) 
#    Tinc configuration                    
#
# This is a configuration file for Lixonet that is already pre-configured for
# you.  Please refer to your lixonet.conf file for changing parameters.

Name = ${name}

# Do not change these.  Lixonet runs over port 9993 by standard.
{{ if len "${tinc_bind_interface:-}" }}
BindToInterface ${tinc_bind_interface}
{{ end }}
{{ if len "${tinc_bind_address:-}" }}
BindToAddress ${tinc_bind_address}
{{ end }}
Port = ${tinc_bind_port:-9994}

# Device is named "lixonet" by Tinc and visible directly in host kernel
DeviceType = ${tinc_device_type:-tap}
Device = ${tinc_device:-/dev/net/tun}
Mode = ${tinc_mode:-switch}
AddressFamily = ${tinc_address_family:-ipv4}

# Default over-the-wire security for Lixonet.
# Blowfish: https://en.wikipedia.org/wiki/Blowfish_(cipher)
# SHA1: https://en.wikipedia.org/wiki/SHA-1
Cipher = ${tinc_cipher:-blowfish}
Digest = ${tinc_digest:-sha1}

# When this option is enabled, packets that cannot be sent directly to the
# destination node, but which would have to be forwarded by an intermediate node,
# are dropped instead. When combined with the IndirectData option, packets for
# nodes for which we do not have a meta connection with are also dropped.
DirectOnly = ${tinc_direct_only:-yes}

{{ if len "${tinc_connect_to:-}" }}
# Custom connect-to list
{{ range "$tinc_connect_to" | split "," }}
ConnectTo = {{.}}
{{ end }}
{{ else }}
{{ range files "tinc/lixonet/hosts" }}{{ if ne . "${name}" }}{{ if ne . "server" }}{{$contents:=file(.)}}{{if match "0\.0\.0\.0" "${contents}"}}
ConnectTo = {{.}}
{{ end }}{{ end }}{{ end }}
{{ end }}