lixonet-ee/tinc/lixonet/tinc.conf.tmpl
2020-04-28 05:35:23 +00:00

48 lines
1.7 KiB
Cheetah

# __ _____ __
# | |\_// \|\ ||_ | _)
# |__|/ \\__/| \||__ | __)
# Tinc configuration
#
# This is a configuration file for Lixonet that is already pre-configured for
# you. Please refer to your lixonet.conf file for changing parameters.
Name = ${name}
# Do not change these. Lixonet runs over port 9993 by standard.
{{ if len "${tinc_bind_interface:-}" }}
BindToInterface ${tinc_bind_interface}
{{ end }}
{{ if len "${tinc_bind_address:-}" }}
BindToAddress ${tinc_bind_address}
{{ end }}
Port = ${tinc_bind_port:-9994}
# Device is named "lixonet" by Tinc and visible directly in host kernel
DeviceType = ${tinc_device_type:-tap}
Device = ${tinc_device:-/dev/net/tun}
Mode = ${tinc_mode:-switch}
AddressFamily = ${tinc_address_family:-ipv4}
# Default over-the-wire security for Lixonet.
# Blowfish: https://en.wikipedia.org/wiki/Blowfish_(cipher)
# SHA1: https://en.wikipedia.org/wiki/SHA-1
Cipher = ${tinc_cipher:-blowfish}
Digest = ${tinc_digest:-sha1}
# When this option is enabled, packets that cannot be sent directly to the
# destination node, but which would have to be forwarded by an intermediate node,
# are dropped instead. When combined with the IndirectData option, packets for
# nodes for which we do not have a meta connection with are also dropped.
DirectOnly = ${tinc_direct_only:-yes}
{{ if len "${tinc_connect_to:-}" }}
# Custom connect-to list
{{ range "$tinc_connect_to" | split "," }}
ConnectTo = {{.}}
{{ end }}
{{ else }}
{{ range files "tinc/lixonet/hosts" }}{{ if ne . "${name}" }}{{ if ne . "server" }}{{$contents:=file(.)}}{{if match "0\.0\.0\.0" "${contents}"}}
ConnectTo = {{.}}
{{ end }}{{ end }}{{ end }}
{{ end }}