|
|
|
@ -15,11 +15,13 @@ ip-forward yes
|
|
|
|
|
ip6-forward yes
|
|
|
|
|
{% endif %}
|
|
|
|
|
{% if iface.goto_table is defined %}
|
|
|
|
|
{% set prio = ifupdown2__prio_base + 2 * index %}
|
|
|
|
|
pre-up ip rule add prio {{ prio }} iif $IFACE table {{ iface.goto_table }}
|
|
|
|
|
pre-up ip rule add prio {{ prio + 1 }} iif $IFACE blackhole
|
|
|
|
|
post-down ip rule del prio {{ prio }} iif $IFACE table {{ iface.goto_table }}
|
|
|
|
|
post-down ip rule del prio {{ prio + 1 }} iif $IFACE blackhole
|
|
|
|
|
{% set prio = ifupdown2__prio_base + 3 * index %}
|
|
|
|
|
pre-up ip rule add prio {{ prio }} iif $IFACE table local
|
|
|
|
|
pre-up ip rule add prio {{ prio + 1 }} iif $IFACE table {{ iface.goto_table }}
|
|
|
|
|
pre-up ip rule add prio {{ prio + 2 }} iif $IFACE blackhole
|
|
|
|
|
post-down ip rule del prio {{ prio }} iif $IFACE table local
|
|
|
|
|
post-down ip rule del prio {{ prio + 1 }} iif $IFACE table {{ iface.goto_table }}
|
|
|
|
|
post-down ip rule del prio {{ prio + 2 }} iif $IFACE blackhole
|
|
|
|
|
{% endif %}
|
|
|
|
|
{% if iface.vrf is defined %}
|
|
|
|
|
vrf {{ iface.vrf }}
|
|
|
|
@ -30,10 +32,13 @@ ipv6-addrgen {{ iface.ipv6_addrgen
|
|
|
|
|
{% endif %}
|
|
|
|
|
{% endmacro %}
|
|
|
|
|
|
|
|
|
|
{% set index = 1 %}
|
|
|
|
|
|
|
|
|
|
{% for name, iface in ifupdown2__interfaces.items() %}
|
|
|
|
|
{% set index = index + 4 %}
|
|
|
|
|
auto {{ name }}
|
|
|
|
|
iface {{ name }}
|
|
|
|
|
{{ iface_common(iface) | indent(4) }}
|
|
|
|
|
{{ iface_common(iface, index) | indent(4) }}
|
|
|
|
|
{% if iface.bridge_ports is defined %}
|
|
|
|
|
bridge-ports {{ iface.bridge_ports | join(" ") }}
|
|
|
|
|
{% endif %}
|
|
|
|
@ -58,19 +63,22 @@ iface {{ name }}
|
|
|
|
|
{% endfor %}
|
|
|
|
|
|
|
|
|
|
{% for name, iface in ifupdown2__wireguard.items() | sort(attribute="0") %}
|
|
|
|
|
{% set index = index + 4 %}
|
|
|
|
|
auto {{ name }}
|
|
|
|
|
iface {{ name }}
|
|
|
|
|
link-type wireguard
|
|
|
|
|
{{ iface_common(iface, index=loop.index) | indent(4) }}
|
|
|
|
|
{{ iface_common(iface, index) | indent(4) }}
|
|
|
|
|
pre-up wg setconf $IFACE /etc/wireguard/$IFACE.conf
|
|
|
|
|
{% for address in iface.peer_allowed_addresses | default([]) %}
|
|
|
|
|
post-up ip route add {{ address }} proto {{ ifupdown2__wireguard_proto }} dev $IFACE
|
|
|
|
|
post-up ip route add {{ address }} proto {{ ifupdown2__wireguard_proto }} \
|
|
|
|
|
table {{ iface.table | default("main") }} dev $IFACE
|
|
|
|
|
{% endfor %}
|
|
|
|
|
{% endfor %}
|
|
|
|
|
|
|
|
|
|
{% for name, iface in ifupdown2__vrf.items() | sort(attribute="0") %}
|
|
|
|
|
{% set index = index + 4 %}
|
|
|
|
|
auto {{ name }}
|
|
|
|
|
iface {{ name }}
|
|
|
|
|
{{ iface_common(iface, index=loop.index) | indent(4) }}
|
|
|
|
|
{{ iface_common(iface, index) | indent(4) }}
|
|
|
|
|
vrf-table {{ iface.table }}
|
|
|
|
|
{% endfor %}
|
|
|
|
|