install mesh-announce

roles/configure_iptables/templates/ip6tables.rules

@@ -51,6 +51,8 @@ COMMIT
 # fastd
 -A INPUT -s 2a03:2260:1016::/48 -p udp -m udp --dport 10010:10021 -j DROP
 -A INPUT -p udp -m udp --dport 10010:10021 -j ACCEPT
+# respondd
+-A INPUT -i bat+ -p udp -m udp --dport 1001 -j ACCEPT
 # wireguard_mesh
 {% for site in sites %}
 -A INPUT -p udp -m udp --dport {{ site.wireguard_mesh_port }} -j ACCEPT

roles/install_mesh-announce/tasks/main.yml

@@ -0,0 +1,24 @@
+---
+- name: clone mesh-announce repo
+  git:
+      repo: https://github.com/FreifunkMYK/mesh-announce.git
+      dest: /opt/mesh-announce
+
+- name: install mesh-announce dependencies
+  pacman:
+      name:
+          - lsb-release
+          - ethtool
+      state: present
+
+- name: create respondd service
+  template:
+      src: respondd.service.j2
+      dest: /etc/systemd/system/respondd.service
+      mode: 0644
+
+- name: start and enable respondd service
+  systemd:
+      name: respondd
+      state: started
+      enabled: yes

roles/install_mesh-announce/templates/respondd.service.j2

@@ -0,0 +1,12 @@
+[Unit]
+Description=Respondd
+After=network.target
+
+[Service]
+ExecStart=/opt/mesh-announce/respondd.py -d /opt/mesh-announce/providers {% for site in sites %}-i bat{{ site.name }} -i vpn{{ site.name }} -b bat{{ site.name }} {% endfor %}
+
+Restart=always
+Environment=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+[Install]
+WantedBy=multi-user.target

setup_fastd.yml

@@ -22,6 +22,7 @@
       - install_wireguard_backbone
       - install_babeld
       - install_fastd
+      - install_mesh-announce
       - install_monitoring
       - install_iperf3
       - update_ssh_keys