Site configuration¶
The site
consists of the files site.conf
and site.mk
.
In the first community based values are defined, which both are processed
during the build process and runtime.
The last is directly included in the make process of Gluon.
Configuration¶
The site.conf
is a lua dictionary with the following defined keys.
- hostname_prefix
- A string which shall prefix the default hostname of a device.
- site_name
- The name of your community.
- site_code
- The code of your community. It is good practice to use the TLD of your community here.
- prefix4
The IPv4 Subnet of your community mesh network in CIDR notation, e.g.
prefix4 = '10.111.111.0/18'
- prefix6
The IPv6 subnet of your community mesh network, e.g.
prefix6 = 'fdca::ffee:babe:1::/64'
- timezone
The timezone of your community live in, e.g.
-- Europe/Berlin timezone = 'CET-1CEST,M3.5.0,M10.5.0/3'
- ntp_server
List of NTP servers available in your community or used by your community, e.g.:
ntp_servers = {'1.ntp.services.ffeh','2.tnp.services.ffeh'}
- opkg : optional
opkg
package manager configuration.There are two optional fields in the
opkg
section:openwrt
overrides the default OpenWrt repository URLextra
specifies a table of additional repositories (with arbitrary keys)
opkg = { openwrt = 'http://opkg.services.ffeh/openwrt/%n/%v/%S/packages', extra = { modules = 'http://opkg.services.ffeh/modules/gluon-%GS-%GR/%S', }, }
There are various patterns which can be used in the URLs:
%n
is replaced by the OpenWrt version codename (e.g. “chaos_calmer”)%v
is replaced by the OpenWrt version number (e.g. “15.05”)%S
is replaced by the target architecture (e.g. “ar71xx/generic”)%GS
is replaced by the Gluon site code (as specified insite.conf
)%GV
is replaced by the Gluon version%GR
is replaced by the Gluon release (as specified insite.mk
)
- regdom : optional
The wireless regulatory domain responsible for your area, e.g.:
regdom = 'DE'
Setting
regdom
in mandatory ifwifi24
orwifi5
is defined.- wifi24 : optional
WLAN configuration for 2.4 GHz devices.
channel
must be set to a valid wireless channel for your radio.There are currently three interface types available. You many choose to configure any subset of them:
ap
creates a master interface where clients may connectmesh
creates an 802.11s mesh interface with forwarding disabledibss
creates an ad-hoc interface
Each interface may be disabled by setting
disabled
totrue
. This will only affect new installations. Upgrades will not changed the disabled state.ap
requires a single parameter, a string, namedssid
which sets the interface’s ESSID.mesh
requires a single parameter, a string, namedid
which sets the mesh id.ibss
requires two parametersr:ssid
(a string) andbssid
(a MAC). An optional parametervlan
(integer) is supported.Both
mesh
andibss
accept an optionalmcast_rate
(kbit/s) parameter for setting the default multicast datarate.wifi24 = { channel = 11, ap = { ssid = 'entenhausen.freifunk.net', }, mesh = { id = 'entenhausen-mesh', mcast_rate = 12000, }, ibss = { ssid = 'ff:ff:ff:ee:ba:be', bssid = 'ff:ff:ff:ee:ba:be', mcast_rate = 12000, }, },
- wifi5 : optional
- Same as wifi24 but for the 5Ghz radio.
- next_node : package
Configuration of the local node feature of Gluon
next_node = { ip4 = '10.23.42.1', ip6 = 'fdca:ffee:babe:1::1', mac = 'ca:ff:ee:ba:be:00' }
- mesh : optional
Options specific to routing protocols.
At the moment, only the
batman_adv
routing protocol has such options:The optional value
gw_sel_class
sets the gateway selection class. The default class 20 is based on the link quality (TQ) only, class 1 is calculated from both the TQ and the announced bandwidth.mesh = { batman_adv = { gw_sel_class = 1, }, }
- fastd_mesh_vpn
Remote server setup for the fastd-based mesh VPN.
The enabled option can be set to true to enable the VPN by default.
If configurable is set to false or unset, the method list will be replaced on updates with the list from the site configuration. Setting configurable to true will allow the user to add the method
null
to the beginning of the method list or removenull
from it, and make this change survive updates. Setting configurable is necessary for the package gluon-luci-mesh-vpn-fastd, which adds a UI for this configuration.In any case, the
null
method should always be the first method in the list if it is supported at all. You should only set configurable to true if the configured peers support both thenull
method and methods with encryption.fastd_mesh_vpn = { methods = {'salsa2012+umac'}, -- enabled = true, -- configurable = true, mtu = 1280, groups = { backbone = { -- Limit number of connected peers from this group limit = 1, peers = { peer1 = { key = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX', -- Having multiple domains prevents SPOF in freifunk.net remotes = { 'ipv4 "vpn1.entenhausen.freifunk.net" port 10000', 'ipv4 "vpn1.entenhausener-freifunk.de" port 10000', }, }, peer2 = { key = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX', -- You can also omit the ipv4 to allow both connection via ipv4 and ipv6 remotes = {'"vpn2.entenhausen.freifunk.net" port 10000'}, }, }, -- Optional: nested peer groups -- groups = { -- lowend_backbone = { -- limit = 1, -- peers = ... -- }, -- }, }, -- Optional: additional peer groups, possibly with other limits -- peertopeer = { -- limit = 10, -- peers = { ... }, -- }, }, bandwidth_limit = { -- The bandwidth limit can be enabled by default here. enabled = false, -- Default upload limit (kbit/s). egress = 200, -- Default download limit (kbit/s). ingress = 3000, }, }
- mesh_on_wan : optional
- Enables the mesh on the WAN port (
true
orfalse
). - mesh_on_lan : optional
- Enables the mesh on the LAN port (
true
orfalse
). - autoupdater : package
Configuration for the autoupdater feature of Gluon.
autoupdater = { branch = 'stable', branches = { stable = { name = 'stable', mirrors = { 'http://[fdca:ffee:babe:1::fec1]/firmware/stable/sysupgrade/', 'http://autoupdate.entenhausen.freifunk.net/firmware/stable/sysupgrade/', }, -- Number of good signatures required good_signatures = 2, pubkeys = { 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX', -- someguy 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX', -- someother } } } }
- roles : optional
Optional role definitions. Nodes will announce their role inside the mesh. This will allow in the backend to distinguish between normal, backbone and service nodes or even gateways (if they advertise that role). It is up to the community which roles to define. See the section below as an example.
default
takes the default role which is set initially. This value should be part oflist
. If you want node owners to change the role via config mode add the packagegluon-luci-node-role
tosite.mk
.The strings to display in the LuCI interface can be configured per language in the
i18n/en.po
,i18n/de.po
, etc. files of the site repository using message IDs likegluon-luci-node-role:role:node
andgluon-luci-node-role:role:backbone
.roles = { default = 'node', list = { 'node', 'test', 'backbone', 'service', }, },
- setup_mode : package
Allows skipping setup mode (config mode) at first boot when attribute
skip
is set totrue
. This is optional and may be left out.setup_mode = { skip = true, },
- legacy : package
Configuration for the legacy upgrade path. This is only required in communities upgrading from Lübeck’s LFF-0.3.x.
legacy = { version_files = {'/etc/.freifunk_version_keep', '/etc/.eff_version_keep'}, old_files = {'/etc/config/config_mode', '/etc/config/ffeh', '/etc/config/freifunk'}, config_mode_configs = {'config_mode', 'ffeh', 'freifunk'}, fastd_configs = {'ffeh_mesh_vpn', 'mesh_vpn'}, mesh_ifname = 'freifunk', tc_configs = {'ffki', 'freifunk'}, wifi_names = {'wifi_freifunk', 'wifi_freifunk5', 'wifi_mesh', 'wifi_mesh5'}, }
Packages¶
The site.mk
is a Makefile which should define constants
involved in the build process of Gluon.
- GLUON_SITE_PACKAGES
- Defines a list of packages which should be installed additionally
to the
gluon-core
package. - GLUON_RELEASE
- The current release version Gluon should use.
- GLUON_PRIORITY
- The default priority for the generated manifests (see the autoupdater documentation for more information).
- GLUON_LANGS
- List of languages (as two-letter-codes) to be included in the web interface. Should always contain
en
.
Config mode texts¶
The community-defined texts in the config mode are configured in PO files in the i18n
subdirectory
of the site configuration. The message IDs currently defined are:
- gluon-config-mode:welcome
- Welcome text on the top of the config wizard page.
- gluon-config-mode:pubkey
- Information about the public VPN key on the reboot page.
- gluon-config-mode:reboot
- General information shown on the reboot page.
There is a POT file in the site example directory which can be used to create templates
for the language files. The command msginit -l en -i ../../docs/site-example/i18n/gluon-site.pot
can be used from the i18n
directory to create an initial PO file called en.po
if the gettext
utilities are installed.
Note
An empty msgstr
, as is the default after running msginit
, leads to
the msgid
being printed as-is. It does not hide the whole text, as
might be expected.
Depending on the context, you might be able to use comments like
<!-- empty -->
as translations to effectively hide the text.
Examples¶
site.mk¶
## gluon site.mk makefile example
## GLUON_SITE_PACKAGES
# specify gluon/openwrt packages to include here
# The gluon-mesh-batman-adv-* package must come first because of the dependency resolution
GLUON_SITE_PACKAGES := \
gluon-mesh-batman-adv-15 \
gluon-alfred \
gluon-respondd \
gluon-autoupdater \
gluon-config-mode-autoupdater \
gluon-config-mode-contact-info \
gluon-config-mode-core \
gluon-config-mode-geo-location \
gluon-config-mode-hostname \
gluon-config-mode-mesh-vpn \
gluon-ebtables-filter-multicast \
gluon-ebtables-filter-ra-dhcp \
gluon-luci-admin \
gluon-luci-autoupdater \
gluon-luci-portconfig \
gluon-luci-wifi-config \
gluon-next-node \
gluon-mesh-vpn-fastd \
gluon-radvd \
gluon-setup-mode \
gluon-status-page \
haveged \
iptables \
iwinfo
## DEFAULT_GLUON_RELEASE
# version string to use for images
# gluon relies on
# opkg compare-versions "$1" '>>' "$2"
# to decide if a version is newer or not.
DEFAULT_GLUON_RELEASE := 0.6+exp$(shell date '+%Y%m%d')
## GLUON_RELEASE
# call make with custom GLUON_RELEASE flag, to use your own release version scheme.
# e.g.:
# $ make images GLUON_RELEASE=23.42+5
# would generate images named like this:
# gluon-ff%site_code%-23.42+5-%router_model%.bin
# Allow overriding the release number from the command line
GLUON_RELEASE ?= $(DEFAULT_GLUON_RELEASE)
# Default priority for updates.
GLUON_PRIORITY ?= 0
# Languages to include
GLUON_LANGS ?= en de
site.conf¶
-- This is an example site configuration for Gluon v2016.1
--
-- Take a look at the documentation located at
-- http://gluon.readthedocs.org/ for details.
--
-- This configuration will not work as it. You're required to make
-- community specific changes to it!
{
-- Used for generated hostnames, e.g. freifunk-abcdef123456. (optional)
-- hostname_prefix = 'freifunk-',
-- Name of the community.
site_name = 'Freifunk Entenhausen',
-- Shorthand of the community.
site_code = 'ffxx',
-- Prefixes used within the mesh. Both are required.
prefix4 = '10.xxx.0.0/20',
prefix6 = 'fdxx:xxxx:xxxx::/64',
-- Timezone of your community.
-- See http://wiki.openwrt.org/doc/uci/system#time_zones
timezone = 'CET-1CEST,M3.5.0,M10.5.0/3',
-- List of NTP servers in your community.
-- Must be reachable using IPv6!
ntp_servers = {'1.ntp.services.ffxx'},
-- Wireless regulatory domain of your community.
regdom = 'DE',
-- Wireless configuration for 2.4 GHz interfaces.
wifi24 = {
-- Wireless channel.
channel = 1,
-- ESSID used for client network.
ap = {
ssid = 'entenhausen.freifunk.net',
-- disabled = true, (optional)
},
mesh = {
-- Adjust these values!
id = 'ffxx-mesh',
mcast_rate = 12000,
-- disabled = true, (optional)
},
},
-- Wireless configuration for 5 GHz interfaces.
-- This should be equal to the 2.4 GHz variant, except
-- for channel.
wifi5 = {
channel = 44,
ap = {
ssid = 'entenhausen.freifunk.net',
},
mesh = {
id = 'ffxx-mesh',
mcast_rate = 12000,
},
},
-- The next node feature allows clients to always reach the node it is
-- connected to using a known IP address.
next_node = {
-- anycast IPs of all nodes
ip4 = '10.xxx.0.xxx',
ip6 = 'fdxx:xxxx:xxxx::xxxx',
-- anycast MAC of all nodes
mac = 'xe:xx:xx:xx:xx:xx',
},
-- Options specific to routing protocols (optional)
-- mesh = {
-- Options specific to the batman-adv routing protocol (optional)
-- batman_adv = {
-- Gateway selection class (optional)
-- The default class 20 is based on the link quality (TQ) only,
-- class 1 is calculated from both the TQ and the announced bandwidth
-- gw_sel_class = 1,
-- },
-- },
-- Refer to http://fastd.readthedocs.org/en/latest/ to better understand
-- what these options do.
fastd_mesh_vpn = {
-- List of crypto-methods to use.
methods = {'salsa2012+umac'},
-- enabled = true,
-- configurable = true,
mtu = 1280,
groups = {
backbone = {
-- Limit number of connected peers to reduce bandwidth.
limit = 1,
-- List of peers.
peers = {
peer1 = {
key = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
-- This is a list, so you might add multiple entries.
remotes = {'ipv4 "xxx.somehost.invalid" port xxxxxx'},
},
peer2 = {
key = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
-- You can also omit the ipv4 to allow both connection via ipv4 and ipv6
remotes = {'"xxx.somehost2.invalid" port xxxxx'},
},
},
-- Optional: nested peer groups
-- groups = {
-- backbone_sub = {
-- ...
-- },
-- ...
-- },
},
-- Optional: additional peer groups, possibly with other limits
-- backbone2 = {
-- ...
-- },
},
bandwidth_limit = {
-- The bandwidth limit can be enabled by default here.
enabled = false,
-- Default upload limit (kbit/s).
egress = 200,
-- Default download limit (kbit/s).
ingress = 3000,
},
},
autoupdater = {
-- Default branch. Don't forget to set GLUON_BRANCH when building!
branch = 'stable',
-- List of branches. You may define multiple branches.
branches = {
stable = {
name = 'stable',
-- List of mirrors to fetch images from. IPv6 required!
mirrors = {'http://1.updates.services.ffhl/stable/sysupgrade'},
-- Number of good signatures required.
-- Have multiple maintainers sign your build and only
-- accept it when a sufficient number of them have
-- signed it.
good_signatures = 2,
-- List of public keys of maintainers.
pubkeys = {
'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', -- Alice
'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', -- Bob
'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', -- Mary
},
},
},
},
-- Node roles
-- roles = {
-- default = 'node',
-- list = {
-- 'node',
-- 'test',
-- 'backbone',
-- 'service',
-- },
-- },
-- Skip setup mode (config mode) on first boot
-- setup_mode = {
-- skip = true,
-- },
}
i18n/en.po¶
msgid ""
msgstr ""
"Content-Type: text/plain; charset=UTF-8\n"
"Project-Id-Version: PACKAGE VERSION\n"
"PO-Revision-Date: 2016-02-04 14:28+0100\n"
"Last-Translator: David Lutz <kpanic@hirnduenger.de>\n"
"Language-Team: English\n"
"Language: en\n"
"MIME-Version: 1.0\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
msgid "gluon-config-mode:welcome"
msgstr ""
"Welcome to the setup wizard of your new Freifunk Duckburg node. "
"Please fill out the following form and submit it."
msgid "gluon-config-mode:pubkey"
msgstr ""
"<p>This is your Freifunk node's public key. The node won't be able to "
"connect to the mesh VPN until the key has been registered on the Freifunk "
"Duckburg servers. "
"To register, send the key together with your node's name (<em><%=hostname%></em>) to "
"<a href=\"mailto:keys@entenhausen.freifunk.net\">keys@entenhausen.freifunk.net</a>."
"</p>"
"<div class=\"the-key\">"
" # <%= hostname %>"
" <br/>"
"<%= pubkey %>"
"</div>"
msgid "gluon-config-mode:reboot"
msgstr ""
"<p>The node is currently rebooting and will try to connect to other "
"nearby Freifunk nodes after that. "
"For more information on the Freifunk Duckburg community, have a look at "
"<a href=\"https://entenhausen.freifunk.net/\">our homepage</a>.</p>"
"<p>To get back to this configuration interface, press the reset button for "
"3 seconds during normal operation. The device will then reboot into config "
"mode.</p>"
"<p>Have fun with your node and exploring of the Freifunk network!</p>"
i18n/de.po¶
msgid ""
msgstr ""
"Content-Type: text/plain; charset=UTF-8\n"
"Project-Id-Version: PACKAGE VERSION\n"
"PO-Revision-Date: 2015-03-19 20:28+0100\n"
"Last-Translator: Matthias Schiffer <mschiffer@universe-factory.net>\n"
"Language-Team: German\n"
"Language: de\n"
"MIME-Version: 1.0\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
msgid "gluon-config-mode:welcome"
msgstr ""
"Willkommen zum Einrichtungsassistenten für deinen neuen Entenhausener "
"Freifunk-Knoten. Fülle das folgende Formular deinen Vorstellungen "
"entsprechend aus und sende es ab."
msgid "gluon-config-mode:pubkey"
msgstr ""
"<p>Dies ist der öffentliche Schlüssel deines Freifunk-Knotens. Erst nachdem "
"er auf den Servern des Entenhausener Freifunk-Projektes eingetragen wurde, "
"kann sich dein Knoten mit dem Entenhausener Mesh-VPN verbinden. Bitte "
"schicke dazu diesen Schlüssel und den Namen deines Knotens "
"(<em><%=hostname%></em>) an "
"<a href=\"mailto:keys@entenhausen.freifunk.net\">keys@entenhausen.freifunk.net</a>."
"</p>"
"<div class=\"the-key\">"
" # <%= hostname %>"
" <br/>"
"<%= pubkey %>"
"</div>"
msgid "gluon-config-mode:reboot"
msgstr ""
"<p>Dein Knoten startet gerade neu und wird anschließend versuchen, "
"sich mit anderen Freifunkknoten in seiner Nähe zu "
"verbinden. Weitere Informationen zur "
"Entenhausener Freifunk-Community findest du auf "
"<a href=\"https://entenhausen.freifunk.net/\">unserer Webseite</a>.</p>"
"<p>Um zu dieser Konfigurationsseite zurückzugelangen, drücke im normalen "
"Betrieb für drei Sekunden den Reset-Button. Das Gerät wird dann im Config "
"Mode neustarten.</p>"
"<p>Viel Spaß mit deinem Knoten und der Erkundung von Freifunk!</p>"
modules¶
# This file allows specifying additional repositories to use
# when building gluon.
#
# In most cases, it is not required so don't add it.
## GLUON_SITE_FEEDS
# for each feed name given, add the corresponding PACKAGES_* lines
# documented below
#GLUON_SITE_FEEDS='my_own_packages'
## PACKAGES_$feedname_REPO
# the git repository from where to clone the package feed
#PACKAGES_MY_OWN_PACKAGES_REPO=https://github.com/.../my-own-packages.git
## PACKAGES_$feedname_COMMIT
# the version/commit of the git repository to clone
#PACKAGES_MY_OWN_PACKAGES_COMMIT=123456789aabcda1a69b04278e4d38f2a3f57e49
## PACKAGES_$feedname_BRANCH
# the branch to check out
#PACKAGES_MY_OWN_PACKAGES_BRANCH=my_branch
site-repos in the wild¶
This is a non-exhaustive list of site-repos from various communities:
- site-ffa (Altdorf, Landshut & Umgebung)
- site-ffbs (Braunschweig)
- site-ffhb (Bremen)
- site-ffda (Darmstadt)
- site-ffgoe (Göttingen)
- site-ffhh (Hamburg)
- site-ffhgw (Greifswald)
- site-ffhl (Lübeck)
- site-ffmd (Magdeburg)
- site-ffmwu (Mainz, Wiesbaden & Umgebung)
- site-ffmyk (Mayen-Koblenz)
- site-ffm (München)
- site-ffms (Münsterland)
- site-ffnw (Nordwest)
- site-ffpb (Paderborn)
- site-ffka (Karlsruhe)
- site-ffrl (Rheinland)
- site-ffrg (Ruhrgebiet)
- site-ffs (Stuttgart)
- site-fftr (Trier)