netconfig-example.yml 2.6 KB

1234567891011121314151617181920212223242526272829303132333435
  1. server:
  2. corednsaddr: 147.182.251.203 # Address of CoreDNS Server (set locally with resolvectl)
  3. grpcaddress: 10.101.0.1:50051 # Address of GRPC Server (used for all interaction with server after registration)
  4. apiaddress: 1.2.3.4:8081 # Address of API Server (used only for registration/unregistration)
  5. accesskey: 5qKTbTgsvb45y3qyRmWft # Key used to sign up with server. Used only during registration
  6. node:
  7. name: my-computer # name of this node
  8. interface: nm-example # name of interface to create/use for WG
  9. network: example # name of network this ode is a part of
  10. password: $2a$0afehuytviN/thMpVlCYkonxy.Ws2.rNCJjBSAa3HZuhrK5hpYxme # encrypted node password, used to retrieve JWT. Can be changed to new pass in plaintext and CLI will update/replace with encrypted pass
  11. macaddress: 6c:4b:91:0g:68:7b # MAC of node. Used as a Unique ID
  12. localaddress: 192.168.1.32 # Address on local network, used as endpoint for other local nodes for faster comms
  13. wgaddress: 10.7.11.2 # Private WG addres on network
  14. wgaddress6: "f8:34:41:77:5c:15" # Private ipv6 address if network is dual stack
  15. roaming: "yes" # Whether or not to grab new endpoint value automatically
  16. dnson: "no" # Whether or not to set local DNS based on Netmaker's Private DNS server
  17. islocal: "no" # Based on network. If yes, will use local IP as endpoint.
  18. isdualstack: "yes" # Use IPv6 in addition to IPv4
  19. isingressgateway: "no" # whether or not node is an ingress gateway (will set iptables forwarding rules)
  20. allowedips: "" # additional IP's to add to client
  21. localrange: "" # local range if it's a local network. For instance, 192.168.1.0/24
  22. postup: "" # postup command, used by ingress/egress gateways to set iptables
  23. postdown: "" # postdown command, used by ingress/egress gateways to set iptables
  24. port: 51821 # WG port to use
  25. keepalive: 20 # default keepalive with nodes
  26. publickey: 8/q9cOg7c9QjnoXygVrY/VNE197VMRadJodkb1ZsujA= # public key of node to show to other nodes
  27. privatekey: "" # private key, set only for changing and then will revert to blank in config
  28. endpoint: 78.170.22.168 # public endpoint for reaching node
  29. postchanges: "false" # if true, will post and config file changes on next checkin and then revert to false
  30. ipforwarding: "yes" # set ip forwarding; highly recommended to leave on
  31. isstatic: "no" # if yes, daemon will not change pubkey, endpoint, or address
  32. udpholepunch: "yes" # run UDP hole punching (will ignore port above, e.g. 51821)
  33. network: home # the network (duplicate of node.network)
  34. daemon: "yes" # whether or not to manage systemd
  35. operatingsystem: "" # not currently in use