| giolekva | dd75080 | 2021-11-07 13:24:21 +0400 | [diff] [blame] | 1 | apiVersion: v1 |
| 2 | kind: ConfigMap | ||||
| 3 | metadata: | ||||
| 4 | name: {{ .Values.ui.nebula.lighthouse.name }} | ||||
| 5 | namespace: {{ .Release.Namespace }} | ||||
| 6 | data: | ||||
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 7 | lighthouse.yaml: | |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 8 | pki: |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 9 | ca: /etc/nebula/lighthouse/ca.crt |
| 10 | cert: /etc/nebula/lighthouse/host.crt | ||||
| 11 | key: /etc/nebula/lighthouse/host.key | ||||
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 12 | static_host_map: |
| giolekva | 7fc15e7 | 2021-12-03 15:54:42 +0400 | [diff] [blame] | 13 | "{{ .Values.ui.nebula.lighthouse.internalIP }}": ["{{ .Values.ui.nebula.lighthouse.externalIP }}:{{ .Values.ui.nebula.lighthouse.port }}"] |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 14 | lighthouse: |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 15 | am_lighthouse: false |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 16 | interval: 60 |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 17 | hosts: |
| 18 | - {{ .Values.ui.nebula.lighthouse.internalIP }} | ||||
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 19 | listen: |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 20 | host: "[::]" |
| giolekva | 7fc15e7 | 2021-12-03 15:54:42 +0400 | [diff] [blame] | 21 | port: 4242 |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 22 | punchy: |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 23 | punch: true |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 24 | cipher: chachapoly |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 25 | tun: |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 26 | disabled: false |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 27 | dev: nebula1 |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 28 | drop_local_broadcast: false |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 29 | drop_multicast: false |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 30 | tx_queue: 500 |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 31 | mtu: 1300 |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 32 | logging: |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 33 | level: info |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 34 | format: text |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 35 | firewall: |
| 36 | conntrack: | ||||
| 37 | tcp_timeout: 12m | ||||
| 38 | udp_timeout: 3m | ||||
| 39 | default_timeout: 10m | ||||
| 40 | max_connections: 100000 | ||||
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 41 | outbound: |
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 42 | - port: any |
| 43 | proto: any | ||||
| 44 | host: any | ||||
| giolekva | 7e73ba7 | 2021-12-03 13:14:20 +0400 | [diff] [blame] | 45 | inbound: |
| 46 | - port: any | ||||
| 47 | proto: any | ||||
| 48 | host: any | ||||