fastd.conf.erb

# managed by puppet -- editing is futile

log to syslog as "fastd-<%= @mesh_interface %>" level error;
interface "<%= @mesh_interface %>-mvpn";
method "salsa2012+umac";    # since fastd v15
method "salsa2012+gmac";
method "xsalsa20-poly1305"; # deprecated
bind any:<%= @fastd_port %>;
hide ip addresses yes;
hide mac addresses yes;
include "secret.conf";
mtu <%= @mesh_mtu %>;
status socket "/var/run/fastd-status.<%= @mesh_interface %>.sock";
include peers from "peers";
<% if @fastd_verify.length > 0 %>
on verify "<%= @fastd_verify %>";
<% end %>
on up "
 ip link set address <%= @vpn_mac %> dev $INTERFACE
 ifup bat-<%= @mesh_code %>
 /usr/sbin/batctl -m bat-<%= @mesh_code %> if add $INTERFACE
 ip link set up dev $INTERFACE
";