fastd.conf

# Bind to a fixed address and port, IPv4 and IPv6 at Port 1234
bind 1.2.3.4:1234 interface "eth0";
# bind [EXTERNE-IPv6]:1234 interface "eth0";

# Set the user, fastd will work as
user "ffein";

# Set the interface name
#interface "ffein-mesh";

# Set the mode, the interface will work as
mode tap;

# Set the mtu of the interface (salsa2012 with ipv6 will need 1406)
mtu 1406;

# Set the methods (aes128-gcm preferred, salsa2012+umac preferred for nodes)
method "salsa2012+umac";

#hide ip addresses yes;
#hide mac addresses yes:

# Secret key generated by `fastd --generate-key`
secret "xxx";

# Log everything to syslog
log to syslog level debug;

# Include peers from our git-repos
include peers from "/ffein/gateway/peers/";
include peers from "/ffein/gateway/gateways/";

# Configure a shell command that is run on connection attempts by unknown peers (true means, all attempts are accepted)
on verify "true";
# on verify "/etc/fastd/fastd-blacklist.sh $PEER_KEY";

# Configure a shell command that is run when fastd comes up
on up "
  ip link set dev $INTERFACE address de:42:42:42:42:01
  ip link set dev $INTERFACE up
  ifup bat0
  batctl if add $INTERFACE
  batctl gw server 54 Mbit/ 54 Mbit
  batctl vm server
  sh /etc/fastd/ffein/iptables_ffein.sh
";