blob: 164a264cb41872543404c275e441b42e25ca2369 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
|
hosts:
f0:
os: FreeBSD
ssh:
user: paul
conf_dir: /usr/local/etc/wireguard
sudo_cmd: doas
reload_cmd: service wireguard reload
lan:
domain: lan.buetow.org
ip: 192.168.1.130
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.130
ipv6: fd42:beef:cafe:2::130
exclude_peers:
- earth
- pixel7pro
- freebsd
- uranus
f1:
os: FreeBSD
ssh:
user: paul
conf_dir: /usr/local/etc/wireguard
sudo_cmd: doas
reload_cmd: service wireguard reload
lan:
domain: lan.buetow.org
ip: 192.168.1.131
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.131
ipv6: fd42:beef:cafe:2::131
exclude_peers:
- earth
- pixel7pro
- freebsd
- uranus
f2:
os: FreeBSD
ssh:
user: paul
conf_dir: /usr/local/etc/wireguard
sudo_cmd: doas
reload_cmd: service wireguard reload
lan:
domain: lan.buetow.org
ip: 192.168.1.132
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.132
ipv6: fd42:beef:cafe:2::132
exclude_peers:
- earth
- pixel7pro
- freebsd
- uranus
f3:
os: FreeBSD
ssh:
user: paul
conf_dir: /usr/local/etc/wireguard
sudo_cmd: doas
reload_cmd: service wireguard reload
lan:
domain: lan.buetow.org
ip: 192.168.1.133
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.133
ipv6: fd42:beef:cafe:2::133
exclude_peers:
- earth
- pixel7pro
- freebsd
- uranus
r0:
os: Linux
ssh:
user: root
conf_dir: /etc/wireguard
sudo_cmd: null
reload_cmd: systemctl reload wg-quick@wg0.service
lan:
domain: lan.buetow.org
ip: 192.168.1.120
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.120
ipv6: fd42:beef:cafe:2::120
exclude_peers:
- earth
- pixel7pro
- freebsd
- uranus
r1:
os: Linux
ssh:
user: root
conf_dir: /etc/wireguard
sudo_cmd: null
reload_cmd: systemctl reload wg-quick@wg0.service
lan:
domain: lan.buetow.org
ip: 192.168.1.121
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.121
ipv6: fd42:beef:cafe:2::121
exclude_peers:
- earth
- pixel7pro
- freebsd
- uranus
r2:
os: Linux
ssh:
user: root
conf_dir: /etc/wireguard
sudo_cmd: null
reload_cmd: systemctl reload wg-quick@wg0.service
lan:
domain: lan.buetow.org
ip: 192.168.1.122
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.122
ipv6: fd42:beef:cafe:2::122
exclude_peers:
- earth
- pixel7pro
- freebsd
- uranus
blowfish:
os: OpenBSD
ssh:
user: rex
port: 2
conf_dir: /etc/wireguard
sudo_cmd: doas
reload_cmd: sh /etc/netstart wg0
internet:
domain: buetow.org
ip: 23.88.35.144
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.110
ipv6: fd42:beef:cafe:2::110
fishfinger:
os: OpenBSD
# primary_gateway: true marks fishfinger as the single gateway peer that receives
# AllowedIPs = 0.0.0.0/0, ::/0 on roaming clients (earth, pixel7pro, uranus).
# wg-quick can only install one default route, so only the primary gateway gets
# the catch-all; secondary gateways (blowfish) get their specific /32+/128 only.
primary_gateway: true
ssh:
user: rex
port: 2
conf_dir: /etc/wireguard
sudo_cmd: doas
reload_cmd: sh /etc/netstart wg0
internet:
domain: buetow.org
ip: 46.23.94.99
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.111
ipv6: fd42:beef:cafe:2::111
earth:
os: Linux
# reachable_via declares that earth's wg0 IPs should be appended to the named
# gateway peer's AllowedIPs on infra hosts that peer with that gateway.
# Earth is behind NAT and cannot be a direct peer on infra hosts; instead,
# traffic routes via fishfinger -> earth.
# WireGuard requires each AllowedIPs prefix to belong to exactly one peer, so
# only one gateway can hold earth's IPs; fishfinger is the primary gateway.
reachable_via: fishfinger
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.200
ipv6: fd42:beef:cafe:2::200
exclude_peers:
- f0
- f1
- f2
- r0
- r1
- r2
- pixel7pro
- freebsd
- uranus
uranus:
os: Linux
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.205
ipv6: fd42:beef:cafe:2::205
exclude_peers:
- f0
- f1
- f2
- r0
- r1
- r2
- earth
- pixel7pro
- freebsd
pixel7pro:
os: Android
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.201
ipv6: fd42:beef:cafe:2::201
exclude_peers:
- f0
- f1
- f2
- r0
- r1
- r2
- earth
- freebsd
- uranus
freebsd:
os: FreeBSD
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.202
ipv6: fd42:beef:cafe:2::202
exclude_peers:
- f0
- f1
- f2
- r0
- r1
- r2
- earth
- pixel7pro
- uranus
gateway: false
pi0:
os: Linux
ssh:
user: paul
conf_dir: /etc/wireguard
sudo_cmd: sudo
reload_cmd: systemctl reload wg-quick@wg0.service
lan:
domain: lan.buetow.org
ip: 192.168.1.125
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.203
ipv6: fd42:beef:cafe:2::203
exclude_peers:
- f0
- f1
- f2
- f3
- r0
- r1
- r2
- earth
- pixel7pro
- freebsd
- pi1
- uranus
pi1:
os: Linux
ssh:
user: paul
conf_dir: /etc/wireguard
sudo_cmd: sudo
reload_cmd: systemctl reload wg-quick@wg0.service
lan:
domain: lan.buetow.org
ip: 192.168.1.126
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.204
ipv6: fd42:beef:cafe:2::204
exclude_peers:
- f0
- f1
- f2
- f3
- r0
- r1
- r2
- earth
- pixel7pro
- freebsd
- pi0
- uranus
rocky:
os: Linux
ssh:
user: root
conf_dir: /etc/wireguard
sudo_cmd: null
reload_cmd: systemctl reload wg-quick@wg0.service
lan:
domain: lan.buetow.org
ip: 192.168.1.123
wg0:
domain: wg0.wan.buetow.org
ip: 192.168.2.123
ipv6: fd42:beef:cafe:2::123
exclude_peers:
- f0
- f1
- f2
- f3
- r0
- r1
- r2
- earth
- pixel7pro
- freebsd
- pi0
- pi1
- uranus
|
