C4TG1RL5_UN1T3D/C4TG1RL5_UN1T3D.DN42
4
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

removed old LXC config

Browse source
This commit is contained in:
famfo 2022-03-19 00:51:12 +01:00
parent 65b201b866
commit a1e947c8d8
20 changed files with 0 additions and 4775 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
LXC/README.md
View file

@ -1,4 +0,0 @@
### LXC container config
- registry: [dn42 registry](https://git.dn42.dev/dn42/registry)
- config: configuration for bird and wireguard

136
LXC/config/bird/bird.conf
View file

@ -1,136 +0,0 @@
define AS = 4242421411;
define IPv4 = 172.23.196.32;
define IPv6 = fd42:deca:fbad::1;
define NETv4 = 172.23.196.32/27;
define NETv6 = fd42:deca:fbad::/48;
define NETSETv4 = 172.23.196.32/27;
define NETSETv6 = [fd42:deca:fbad::/48+];
log "/var/log/bird.log" all;
roa4 table dn42_roa;
roa6 table dn42_roa_v6;
function is_self_net() {
return net ~ NETSETv4;
}
function is_valid_network() {
return net ~ [
172.20.0.0/14{21,29}, # dn42
172.20.0.0/24{28,32}, # dn42 Anycast
172.21.0.0/24{28,32}, # dn42 Anycast
172.22.0.0/24{28,32}, # dn42 Anycast
172.23.0.0/24{28,32}, # dn42 Anycast
172.31.0.0/16+, # ChaosVPN
10.100.0.0/14+, # ChaosVPN
10.127.0.0/16{16,32}, # neonetwork
10.0.0.0/8{15,24} # Freifunk.net
];
}
function is_self_net_v6() {
return net ~ NETSETv6;
}
function is_valid_network_v6() {
return net ~ [
fd00::/8{44,64} # ULA address space as per RFC 4193
];
}
protocol device {
scan time 10;
}
protocol kernel {
scan time 20;
ipv4 {
import none;
export filter {
if source = RTS_STATIC then reject;
krt_prefsrc = IPv4;
accept;
};
};
}
protocol kernel {
scan time 20;
ipv6 {
import none;
export filter {
if source = RTS_STATIC then reject;
krt_prefsrc = IPv6;
accept;
};
};
};
protocol static {
roa4 { table dn42_roa; };
include "/etc/bird/dn42_roa_bird2_4.conf";
};
protocol static {
roa6 { table dn42_roa_v6; };
include "/etc/bird/dn42_roa_bird2_6.conf";
};
protocol static {
ipv4;
route 172.20.53.97/32 via "wg0";
}
protocol static {
ipv6;
route fd80::ade0/124 via "wg0";
}
protocol static {
route NETv4 reject;
ipv4 {
import all;
export none;
};
}
protocol static {
route NETv6 reject;
ipv6 {
import all;
export none;
};
}
template bgp dnpeers {
local as AS;
path metric 1;
ipv4 {
import filter {
if is_valid_network() && !is_self_net() then {
if (roa_check(dn42_roa, net, bgp_path.last) != ROA_VALID) then {
print "[dn42] ROA check failed for ", net, " ASN ", bgp_path.last;
reject;
} else accept;
} else reject;
};
export filter { if is_valid_network() && source ~ [RTS_STATIC, RTS_BGP] then accept; else reject; };
import limit 1000 action block;
};
ipv6 {
import filter {
if is_valid_network_v6() && !is_self_net_v6() then {
if (roa_check(dn42_roa_v6, net, bgp_path.last) != ROA_VALID) then {
print "[dn42] ROA check failed for ", net, " ASN ", bgp_path.last;
reject;
} else accept;
} else reject;
};
export filter { if is_valid_network_v6() && source ~ [RTS_STATIC, RTS_BGP] then accept; else reject; };
import limit 1000 action block;
};
}
include "/etc/bird/peers/*";

1762
LXC/config/bird/bird/dn42_roa_bird2_4.conf
View file

File diff suppressed because it is too large Load diff

1560
LXC/config/bird/bird/dn42_roa_bird2_6.conf
View file

File diff suppressed because it is too large Load diff

7
LXC/config/bird/bird/peers/kioubit.conf
View file

@ -1,7 +0,0 @@
protocol bgp kioubit from dnpeers {
neighbor 172.20.53.97 as 4242423914;
}
protocol bgp kioubit_v6 from dnpeers {
neighbor fe80::ade0%wg0 as 4242423914;
}

1187
LXC/config/unbound/unbound.conf
View file

File diff suppressed because it is too large Load diff

25
LXC/config/wireguard/wg0.conf
View file

@ -1,25 +0,0 @@
# DN42 peer: Kioubit
[Interface]
FwMark = 42
PrivateKey =
ListenPort = 20103
Table = off
#Address = 192.168.219.209/27
Address = fe80::ade1/48
#PostUp = ip a add dev %i 172.23.196.32/32 peer 172.20.53.97/32
#PostUp = ip a add dev %i 172.23.196.42/32
PostUp = ip a add dev %i fd42:deca:fbad::1/128 peer fe80::ade0/128
PostUp = ip a add dev %i fd42:deca:fbad::1111:1/128
#PostUp = sysctl -w net.ipv4.ip_forward=1
#PostUp = sysctl -w net.ipv4.conf.default.rp_filter=0
PostUp = sysctl -w net.ipv6.conf.%i.autoconf=0
[Peer]
Endpoint = de2.g-load.eu:21411
PublicKey = B1xSG/XTJRLd+GrWDsB06BqnIq8Xud93YVh/LYYYtUY=
AllowedIPs = fd00::/8, fe80::/10, 10.0.0.0/8, 172.16.0.0/12

19
LXC/config/wireguard/wg0_4.conf
View file

@ -1,19 +0,0 @@
# DN42 peer: Kioubit
[Interface]
FwMark = 42
PrivateKey =
ListenPort = 20103
Table = off
Address = 192.168.219.209/27
PostUp = ip a add dev %i 172.23.196.32/32 peer 172.20.53.97/32
PostUp = ip a add dev %i 172.23.196.42/32
PostUp = sysctl -w net.ipv4.conf.default.rp_filter=0
[Peer]
Endpoint = de2.g-load.eu:21411
PublicKey = B1xSG/XTJRLd+GrWDsB06BqnIq8Xud93YVh/LYYYtUY=
AllowedIPs = 172.16.0.0/12, 192.168.219.0/24

1
LXC/id_ed25519.pub
View file

@ -1 +0,0 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJC7iwY7M820vt5RXrCQt0VPufulyVCTuTzO5oSpWM0R catgirls@dn42

7
LXC/registry/data/aut-num/AS4242421411
View file

@ -1,7 +0,0 @@
aut-num: AS4242421411
as-name: AS-C4TG1RL5-DN42
admin-c: C4TG1RL5-DN42
tech-c: C4TG1RL5-DN42
mnt-by: C4TG1RL5-MNT
org: ORG-C4TG1RL5
source: DN42

8
LXC/registry/data/dns/catgirls.dn42
View file

@ -1,8 +0,0 @@
domain: catgirls.dn42
admin-c: C4TG1RL5-DN42
tech-c: C4TG1RL5-DN42
mnt-by: C4TG1RL5-MNT
org: ORG-C4TG1RL5
nserver: ns1.catgirls.dn42 172.23.196.42
nserver: ns1.catgirls.dn42 fd42:deca:fbad::1111:1
source: DN42

14
LXC/registry/data/inet6num/fd42:deca:fbad::_48
View file

@ -1,14 +0,0 @@
inet6num: fd42:deca:fbad:0000:0000:0000:0000:0000 - fd42:deca:fbad:ffff:ffff:ffff:ffff:ffff
cidr: fd42:deca:fbad::/48
netname: C4TG1RL5-NETWORK
descr: Catgirls! - DECAF BAD
country: DE
country: PL
country: US
admin-c: C4TG1RL5-DN42
tech-c: C4TG1RL5-DN42
mnt-by: C4TG1RL5-MNT
org: ORG-C4TG1RL5
status: ASSIGNED
nserver: ns1.catgirls.dn42
source: DN42

15
LXC/registry/data/inetnum/172.23.196.32_27
View file

@ -1,15 +0,0 @@
inetnum: 172.23.196.32 - 172.23.196.63
cidr: 172.23.196.32/27
netname: C4TG1RL5-NETWORK-IPV4
descr: Catgirls - legacy net
country: DE
country: PL
country: US
admin-c: C4TG1RL5-DN42
tech-c: C4TG1RL5-DN42
mnt-by: C4TG1RL5-MNT
org: ORG-C4TG1RL5
status: ASSIGNED
nserver: ns1.catgirls.dn42
source: DN42

6
LXC/registry/data/mntner/C4TG1RL5-MNT
View file

@ -1,6 +0,0 @@
mntner: C4TG1RL5-MNT
admin-c: C4TG1RL5-DN42
tech-c: C4TG1RL5-DN42
mnt-by: C4TG1RL5-MNT
source: DN42
auth: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJC7iwY7M820vt5RXrCQt0VPufulyVCTuTzO5oSpWM0R catgirls@dn42

6
LXC/registry/data/organisation/ORG-C4TG1RL5
View file

@ -1,6 +0,0 @@
organisation: ORG-C4TG1RL5
org-name: C4TG1RL5_UN1T3D
admin-c: C4TG1RL5-DN42
tech-c: C4TG1RL5-DN42
mnt-by: C4TG1RL5-MNT
source: DN42

7
LXC/registry/data/person/C4TG1RL5-DN42
View file

@ -1,7 +0,0 @@
person: C4TG1RL5-DN42
e-mail: lemon@lemonsh.moe
contact: xmpp:famfo@famfo.xyz
contact: xmpp:lemon@lemonsh.moe
nic-hdl: C4TG1RL5-DN42
mnt-by: C4TG1RL5-MNT
source: DN42

4
LXC/registry/data/route/172.23.196.32_27
View file

@ -1,4 +0,0 @@
route: 172.23.196.32/27
origin: AS4242421411
mnt-by: C4TG1RL5-MNT
source: DN42

5
LXC/registry/data/route6/fd42:deca:fbad::_48
View file

@ -1,5 +0,0 @@
route6: fd42:deca:fbad::/48
origin: AS4242421411
max-length: 48
mnt-by: C4TG1RL5-MNT
source: DN42

1
LXC/wg_publicley
View file

@ -1 +0,0 @@
9QGXLKq8Ug9X6nf3w6HlzhBDCeUrYlWs+FuDRqUyfDM=

1
README.md
View file

@ -1,6 +1,5 @@
### C4TG1RL5_UN1T3D.DN42
dn42 config for all C4TG1RL5_UN1T3D servers (with less leetspeech then the organization)
- LXC: config for lemon's LXC container
- thilo-alpine: config on famfo's server