40bd40c0d4
With this commit configuration via uci, similiar to the one used for OpenVPN, will be added to tinc. Most of the parameters are working just as described in the official manpages of tincd and tinc.conf as provided by its developer. The only exceptions are 'disabled' which if set to 1 will make the init script completely ignore this tinc network and/or tinc host and 'generate_keys' which if set to 1 will check whether a key pair is already present for the given tinc network and if not will generate them with the key size of "key_size" (default if not present: 2048) - this reduces the "effort" of setting up a tinc VPN on a router to just providing the right uci config file with no need of creating custom initialization scripts for for instance the key generation. Furthermore, similiar to the OpenVPN configuration, also tinc configs of its native format can be used. They just need to be placed in /etc/tinc/NETNAME. The init scripts will always copy the content of /etc/tinc/ to /tmp first and will append any parameters provided in /etc/config/tinc afterwards (the user needs to take care to not specify non-list parameters in both uci and native config). (Trivial note: not working URLs of old repositories have been removed from Makefile for downloading sources) git-svn-id: svn://svn.openwrt.org/openwrt/packages@29137 3c298f89-4303-0410-b956-a3cf2f4a3e73
59 lines
1.2 KiB
Plaintext
59 lines
1.2 KiB
Plaintext
config tinc-net NETNAME
|
|
# Remove to enable
|
|
option disabled 1
|
|
|
|
## Daemon Configuration (cmd arguments)
|
|
#option generate_keys 0
|
|
#option key_size 2048
|
|
#option log /tmp/log/tinc.NETNAME.log
|
|
#option debug 3
|
|
|
|
## Server Configuration (tinc.conf)
|
|
#option AddressFamily any
|
|
#option BindToAddress 127.0.0.1
|
|
#option BindToInterface lo
|
|
|
|
#list ConnectTo peer1
|
|
|
|
#option DirectOnly 0
|
|
#option Forwarding internal
|
|
#option GraphDumpFile /tmp/log/tinc.NETNAME.dot
|
|
#option Hostnames 0
|
|
#option IffOneQueue 0
|
|
#option Interface NETNAME
|
|
#option KeyExpire 3600
|
|
#option MACExpire 600
|
|
#option MaxTimeout 900
|
|
#option Mode router
|
|
|
|
option Name NODENAME
|
|
|
|
#option PingInterval 60
|
|
#option PingTimeout 5
|
|
#option PriorityInheritance 0
|
|
#option PrivateKeyFile /etc/tinc/NETNAME/rsa_key.priv
|
|
#option ProcessPriority normal
|
|
#option ReplayWindow 16
|
|
#option StrictSubnets 0
|
|
#option TunnelServer 0
|
|
#option UDPRcvBuf x
|
|
#option UDPSndBuf x
|
|
|
|
config tinc-host NODENAME
|
|
# Remove to enable
|
|
option disabled 1
|
|
|
|
option net NETNAME
|
|
|
|
#list Address example.com
|
|
#option Cipher blowfish
|
|
#option ClampMSS yes
|
|
#option Compression 0
|
|
#option Digest sha1
|
|
#option IndirectData 0
|
|
#option MACLength 4
|
|
#option PMTU 1514
|
|
#option PMTUDiscovery yes
|
|
#option Port 655
|
|
#option Subnet 192.168.1.0/24
|