...
 
Commits (2)
......@@ -18,11 +18,11 @@ grp = inv.group("vpnservers",
batman_gateway=True,
firewall_enabled=True,
)
grp.host(1, "vpn01.bremen.freifunk.net", exit_ipv4="default", exit_ipv4_interface="eth0", exit_ipv6_remote=False, exit_ipv6_interface="eth0")
grp.host(2, "vpn02.bremen.freifunk.net", exit_ipv4="default", exit_ipv4_interface="eth0", exit_ipv6_remote=False, exit_ipv6_interface="eth0")
grp.host(3, "vpn03.bremen.freifunk.net", exit_ipv4="default", exit_ipv4_interface="eth0", exit_ipv6_remote=False, exit_ipv6_interface="eth0")
grp.host(5, "vpn05.bremen.freifunk.net", exit_ipv4="default", exit_ipv4_interface="ens3", exit_ipv6_remote=False, exit_ipv6_interface="ens3")
grp.host(6, "vpn06.bremen.freifunk.net", exit_ipv4="default", exit_ipv4_interface="eth0")
grp.host(1, "vpn01.bremen.freifunk.net", exit_ipv4="default", exit_ipv4_interface="eth0", exit_ipv6_remote=False, exit_ipv6_interface="eth0", max_mtu=1462)
grp.host(2, "vpn02.bremen.freifunk.net", exit_ipv4="default", exit_ipv4_interface="eth0", exit_ipv6_remote=False, exit_ipv6_interface="eth0", max_mtu=1438)
grp.host(3, "vpn03.bremen.freifunk.net", exit_ipv4="default", exit_ipv4_interface="eth0", exit_ipv6_remote=False, exit_ipv6_interface="eth0", max_mtu=1462)
grp.host(5, "vpn05.bremen.freifunk.net", exit_ipv4="default", exit_ipv4_interface="ens3", exit_ipv6_remote=False, exit_ipv6_interface="ens3", max_mtu=1438)
grp.host(6, "vpn06.bremen.freifunk.net", exit_ipv4="default", exit_ipv4_interface="eth0", max_mtu=1462)
grp = inv.group("eventsserver")
grp.host(0, "mgmt.bremen.freifunk.net")
......@@ -31,7 +31,7 @@ grp = inv.group("webserver")
grp.host(0, "webserver.bremen.freifunk.net")
grp = inv.group("downlinks", batman_gateway=True, firewall_enabled=True)
grp.host(12, "ipv6-downlink.bremen.freifunk.net")
grp.host(12, "ipv6-downlink.bremen.freifunk.net", max_mtu=1462)
grp = inv.group("dnsserver");
grp.host(0, "dns.bremen.freifunk.net");
......
......@@ -9,6 +9,7 @@ iface {{ ifname }} inet manual
post-down ip link del $IFACE
up ip link set up $IFACE
down ip link set down $IFACE
up ip link set $IFACE mtu {{ [ hostvars[host].max_mtu, max_mtu ] | min }}
up batctl -m {{ batman_interface }} if add $IFACE
down batctl -m {{ batman_interface }} if del $IFACE
......
......@@ -15,4 +15,6 @@ birdc6 configure > /dev/null
# TODO: This doesn't belong here but in the unbound role
sudo -u nobody /opt/{{ site_code }}/icvpn-scripts/mkdns -s "$DATADIR" -x bremen -f unbound > /etc/unbound/unbound.conf.d/icvpn.conf
unbound-control reload > /dev/null
if unbound-checkconf /etc/unbound/unbound.conf.d/icvpn.conf >/dev/null 2>&1; then
unbound-control reload > /dev/null
fi