meshdrop/fips.yaml at master · sandwichfarm/meshdrop · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
# MeshDrop container FIPS configuration
#
# Edit peers below, then restart the MeshDrop container:
#   docker compose up -d --build
#
# This file is mounted into the container at /etc/fips/fips.yaml.
# The fips and fipsctl binaries are installed inside the Docker image.
# The FIPS control socket is internal to the container at /run/fips/control.sock;
# MeshDrop uses that in-container path by default, so compose does not need a
# FIPS_CONTROL_SOCKET environment override.

node:
  identity:
    # By default, FIPS will use an ephemeral keypair. Uncomment persistent if
    # you switch this config to a writable directory mount and want stable keys.
    # persistent: true
    #
    # Or set an explicit nsec here if you want a stable identity:
    # nsec: "nsec1..."

tun:
  enabled: true
  name: fips0
  mtu: 1280

dns:
  enabled: false

transports:
  udp:
    bind_addr: "0.0.0.0:2121"

  tcp:
    bind_addr: "0.0.0.0:8443"

peers:
  - npub: "npub10yffd020a4ag8zcy75f9pruq3rnghvvhd5hphl9s62zgp35s560qrksp9u"
    alias: "one"
    addresses:
      - transport: udp
        addr: "23.182.128.74:2121"
      - transport: tcp
        addr: "23.182.128.74:443"
    connect_policy: auto_connect
  - npub: "npub136yqae6na688fs75g95ppps3lxe07fvxefj77938zf47uhm6074sxw8ctm"
    alias: "two"
    addresses:
      - transport: udp
        addr: "54.183.70.180:2121"
    connect_policy: auto_connect
  - npub: "npub1mqelkzqp4659fws35h2wvr7z9caka5ml8qddj3ssnwaulwpxdd9sdc3esw"
    alias: "three"
    addresses:
      - transport: tcp
        addr: "66.92.204.38:8443"
    connect_policy: auto_connect
  - npub: "npub180h826menu06dh0856dvqdkz4jraplxmu4u6aclmve2zh27j6fnsncd93m"
    alias: "four"
    addresses:
      - transport: udp
        addr: "139.84.199.225:51820"
    connect_policy: auto_connect