From 840f5e1b6e15d9e3e4200a56201d657470471478 Mon Sep 17 00:00:00 2001
From: dexxter00 <95716872+dexxter00@users.noreply.github.com>
Date: Wed, 5 Oct 2022 22:32:09 +0300
Subject: [PATCH] new config

---
 config/dhcp     |  37 +++++++++++++++
 config/dropbear |   5 ++
 config/firewall | 119 ++++++++++++++++++++++++++++++++++++++++++++++++
 config/luci     |  41 +++++++++++++++++
 config/network  |  73 +++++++++++++++++++++++++++++
 config/rpcd     |  10 ++++
 config/system   |  18 ++++++++
 config/ubootenv |   0
 config/ucitrack |  56 +++++++++++++++++++++++
 config/uhttpd   |  31 +++++++++++++
 config/wireless |  57 +++++++++++++++++++++++
 11 files changed, 447 insertions(+)
 create mode 100644 config/dhcp
 create mode 100644 config/dropbear
 create mode 100644 config/firewall
 create mode 100644 config/luci
 create mode 100644 config/network
 create mode 100644 config/rpcd
 create mode 100644 config/system
 create mode 100644 config/ubootenv
 create mode 100644 config/ucitrack
 create mode 100644 config/uhttpd
 create mode 100644 config/wireless

diff --git a/config/dhcp b/config/dhcp
new file mode 100644
index 0000000..0b7f707
--- /dev/null
+++ b/config/dhcp
@@ -0,0 +1,37 @@
+
+config dnsmasq
+	option domainneeded '1'
+	option boguspriv '1'
+	option filterwin2k '0'
+	option localise_queries '1'
+	option rebind_protection '1'
+	option rebind_localhost '1'
+	option local '/lan/'
+	option domain 'lan'
+	option expandhosts '1'
+	option nonegcache '0'
+	option authoritative '1'
+	option readethers '1'
+	option leasefile '/tmp/dhcp.leases'
+	option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
+	option nonwildcard '1'
+	option localservice '1'
+	option ednspacket_max '1232'
+
+config dhcp 'lan'
+	option interface 'lan'
+	option start '100'
+	option limit '150'
+	option leasetime '12h'
+	option dhcpv4 'server'
+	option dhcpv6 'server'
+	option ra 'server'
+	list ra_flags 'managed-config'
+	list ra_flags 'other-config'
+
+config odhcpd 'odhcpd'
+	option maindhcp '0'
+	option leasefile '/tmp/hosts/odhcpd'
+	option leasetrigger '/usr/sbin/odhcpd-update'
+	option loglevel '4'
+
diff --git a/config/dropbear b/config/dropbear
new file mode 100644
index 0000000..2139ba0
--- /dev/null
+++ b/config/dropbear
@@ -0,0 +1,5 @@
+config dropbear
+	option PasswordAuth 'on'
+	option RootPasswordAuth 'on'
+	option Port         '22'
+#	option BannerFile   '/etc/banner'
diff --git a/config/firewall b/config/firewall
new file mode 100644
index 0000000..a1941d0
--- /dev/null
+++ b/config/firewall
@@ -0,0 +1,119 @@
+
+config defaults
+	option syn_flood '1'
+	option input 'ACCEPT'
+	option output 'ACCEPT'
+	option forward 'REJECT'
+
+config zone
+	option name 'lan'
+	option input 'ACCEPT'
+	option output 'ACCEPT'
+	option forward 'ACCEPT'
+	list network 'lan'
+
+config zone
+	option name 'wan'
+	option input 'REJECT'
+	option output 'ACCEPT'
+	option forward 'REJECT'
+	option masq '1'
+	option mtu_fix '1'
+
+config forwarding
+	option src 'lan'
+	option dest 'wan'
+
+config rule
+	option name 'Allow-DHCP-Renew'
+	option src 'wan'
+	option proto 'udp'
+	option dest_port '68'
+	option target 'ACCEPT'
+	option family 'ipv4'
+
+config rule
+	option name 'Allow-Ping'
+	option src 'wan'
+	option proto 'icmp'
+	option icmp_type 'echo-request'
+	option family 'ipv4'
+	option target 'ACCEPT'
+
+config rule
+	option name 'Allow-IGMP'
+	option src 'wan'
+	option proto 'igmp'
+	option family 'ipv4'
+	option target 'ACCEPT'
+
+config rule
+	option name 'Allow-DHCPv6'
+	option src 'wan'
+	option proto 'udp'
+	option dest_port '546'
+	option family 'ipv6'
+	option target 'ACCEPT'
+
+config rule
+	option name 'Allow-MLD'
+	option src 'wan'
+	option proto 'icmp'
+	option src_ip 'fe80::/10'
+	list icmp_type '130/0'
+	list icmp_type '131/0'
+	list icmp_type '132/0'
+	list icmp_type '143/0'
+	option family 'ipv6'
+	option target 'ACCEPT'
+
+config rule
+	option name 'Allow-ICMPv6-Input'
+	option src 'wan'
+	option proto 'icmp'
+	list icmp_type 'echo-request'
+	list icmp_type 'echo-reply'
+	list icmp_type 'destination-unreachable'
+	list icmp_type 'packet-too-big'
+	list icmp_type 'time-exceeded'
+	list icmp_type 'bad-header'
+	list icmp_type 'unknown-header-type'
+	list icmp_type 'router-solicitation'
+	list icmp_type 'neighbour-solicitation'
+	list icmp_type 'router-advertisement'
+	list icmp_type 'neighbour-advertisement'
+	option limit '1000/sec'
+	option family 'ipv6'
+	option target 'ACCEPT'
+
+config rule
+	option name 'Allow-ICMPv6-Forward'
+	option src 'wan'
+	option dest '*'
+	option proto 'icmp'
+	list icmp_type 'echo-request'
+	list icmp_type 'echo-reply'
+	list icmp_type 'destination-unreachable'
+	list icmp_type 'packet-too-big'
+	list icmp_type 'time-exceeded'
+	list icmp_type 'bad-header'
+	list icmp_type 'unknown-header-type'
+	option limit '1000/sec'
+	option family 'ipv6'
+	option target 'ACCEPT'
+
+config rule
+	option name 'Allow-IPSec-ESP'
+	option src 'wan'
+	option dest 'lan'
+	option proto 'esp'
+	option target 'ACCEPT'
+
+config rule
+	option name 'Allow-ISAKMP'
+	option src 'wan'
+	option dest 'lan'
+	option dest_port '500'
+	option proto 'udp'
+	option target 'ACCEPT'
+
diff --git a/config/luci b/config/luci
new file mode 100644
index 0000000..8eb8a9b
--- /dev/null
+++ b/config/luci
@@ -0,0 +1,41 @@
+
+config core 'main'
+	option lang 'auto'
+	option mediaurlbase '/luci-static/bootstrap'
+	option resourcebase '/luci-static/resources'
+	option ubuspath '/ubus/'
+
+config extern 'flash_keep'
+	option uci '/etc/config/'
+	option dropbear '/etc/dropbear/'
+	option openvpn '/etc/openvpn/'
+	option passwd '/etc/passwd'
+	option opkg '/etc/opkg.conf'
+	option firewall '/etc/firewall.user'
+	option uploads '/lib/uci/upload/'
+
+config internal 'languages'
+
+config internal 'sauth'
+	option sessionpath '/tmp/luci-sessions'
+	option sessiontime '3600'
+
+config internal 'ccache'
+	option enable '1'
+
+config internal 'themes'
+	option Bootstrap '/luci-static/bootstrap'
+	option BootstrapDark '/luci-static/bootstrap-dark'
+	option BootstrapLight '/luci-static/bootstrap-light'
+
+config internal 'apply'
+	option rollback '90'
+	option holdoff '4'
+	option timeout '5'
+	option display '1.5'
+
+config internal 'diag'
+	option dns 'openwrt.org'
+	option ping 'openwrt.org'
+	option route 'openwrt.org'
+
diff --git a/config/network b/config/network
new file mode 100644
index 0000000..3c34761
--- /dev/null
+++ b/config/network
@@ -0,0 +1,73 @@
+
+config interface 'loopback'
+	option device 'lo'
+	option proto 'static'
+	option ipaddr '127.0.0.1'
+	option netmask '255.0.0.0'
+
+config globals 'globals'
+	option ula_prefix 'fd4a:07c0:7d8d::/48'
+
+config device
+	option name 'br-lan'
+	option type 'bridge'
+	list ports 'eth0.1'
+
+config interface 'lan'
+	option proto 'static'
+	option netmask '255.255.255.0'
+	option ip6assign '60'
+	option device 'br-lan.1'
+	option ipaddr '192.168.1.1'
+	option gateway '192.168.1.20'
+	list dns '8.8.8.8'
+
+config switch
+	option name 'switch0'
+	option reset '1'
+	option enable_vlan '1'
+
+config switch_vlan
+	option device 'switch0'
+	option vlan '1'
+	option ports '2 0t'
+
+config switch_vlan
+	option device 'switch0'
+	option vlan '2'
+	option ports '3 6t'
+
+config bridge-vlan
+	option device 'br-lan'
+	option vlan '1'
+	list ports 'eth0.1'
+
+config bridge-vlan
+	option device 'br-lan'
+	option vlan '21'
+	list ports 'eth0.1:t'
+
+config bridge-vlan
+	option device 'br-lan'
+	option vlan '23'
+	list ports 'eth0.1:t'
+
+config bridge-vlan
+	option device 'br-lan'
+	option vlan '20'
+	list ports 'eth0.1:t'
+
+config interface 'userwifi'
+	option proto 'none'
+	option device 'br-lan.21'
+	option defaultroute '0'
+	option peerdns '0'
+	option delegate '0'
+
+config interface 'videowifi'
+	option proto 'none'
+	option device 'br-lan.23'
+	option defaultroute '0'
+	option peerdns '0'
+	option delegate '0'
+
diff --git a/config/rpcd b/config/rpcd
new file mode 100644
index 0000000..176c643
--- /dev/null
+++ b/config/rpcd
@@ -0,0 +1,10 @@
+config rpcd
+	option socket /var/run/ubus/ubus.sock
+	option timeout 30
+
+config login
+	option username 'root'
+	option password '$p$root'
+	list read '*'
+	list write '*'
+
diff --git a/config/system b/config/system
new file mode 100644
index 0000000..7f84f13
--- /dev/null
+++ b/config/system
@@ -0,0 +1,18 @@
+
+config system
+	option hostname 'OpenWrt'
+	option ttylogin '0'
+	option log_size '64'
+	option urandom_seed '0'
+	option compat_version '1.0'
+	option zonename 'UTC'
+	option log_proto 'udp'
+	option conloglevel '8'
+	option cronloglevel '5'
+
+config timeserver 'ntp'
+	list server '0.openwrt.pool.ntp.org'
+	list server '1.openwrt.pool.ntp.org'
+	list server '2.openwrt.pool.ntp.org'
+	list server '3.openwrt.pool.ntp.org'
+
diff --git a/config/ubootenv b/config/ubootenv
new file mode 100644
index 0000000..e69de29
diff --git a/config/ucitrack b/config/ucitrack
new file mode 100644
index 0000000..bb4cdbc
--- /dev/null
+++ b/config/ucitrack
@@ -0,0 +1,56 @@
+config network
+	option init network
+	list affects dhcp
+
+config wireless
+	list affects network
+
+config firewall
+	option init firewall
+	list affects luci-splash
+	list affects qos
+	list affects miniupnpd
+
+config olsr
+	option init olsrd
+
+config dhcp
+	option init dnsmasq
+	list affects odhcpd
+
+config odhcpd
+	option init odhcpd
+
+config dropbear
+	option init dropbear
+
+config httpd
+	option init httpd
+
+config fstab
+	option exec '/sbin/block mount'
+
+config qos
+	option init qos
+
+config system
+	option init led
+	option exec '/etc/init.d/log reload'
+	list affects luci_statistics
+	list affects dhcp
+
+config luci_splash
+	option init luci_splash
+
+config upnpd
+	option init miniupnpd
+
+config ntpclient
+	option init ntpclient
+
+config samba
+	option init samba
+
+config tinyproxy
+	option init tinyproxy
+
diff --git a/config/uhttpd b/config/uhttpd
new file mode 100644
index 0000000..cb2ff71
--- /dev/null
+++ b/config/uhttpd
@@ -0,0 +1,31 @@
+
+config uhttpd 'main'
+	list listen_http '0.0.0.0:80'
+	list listen_http '[::]:80'
+	list listen_https '0.0.0.0:443'
+	list listen_https '[::]:443'
+	option redirect_https '0'
+	option home '/www'
+	option rfc1918_filter '1'
+	option max_requests '3'
+	option max_connections '100'
+	option cert '/etc/uhttpd.crt'
+	option key '/etc/uhttpd.key'
+	option cgi_prefix '/cgi-bin'
+	list lua_prefix '/cgi-bin/luci=/usr/lib/lua/luci/sgi/uhttpd.lua'
+	option script_timeout '60'
+	option network_timeout '30'
+	option http_keepalive '20'
+	option tcp_keepalive '1'
+	option ubus_prefix '/ubus'
+
+config cert 'defaults'
+	option days '730'
+	option key_type 'ec'
+	option bits '2048'
+	option ec_curve 'P-256'
+	option country 'ZZ'
+	option state 'Somewhere'
+	option location 'Unknown'
+	option commonname 'OpenWrt'
+
diff --git a/config/wireless b/config/wireless
new file mode 100644
index 0000000..72710e3
--- /dev/null
+++ b/config/wireless
@@ -0,0 +1,57 @@
+
+config wifi-device 'radio0'
+	option type 'mac80211'
+	option path 'pci0000:00/0000:00:00.0'
+	option channel '36'
+	option band '5g'
+	option htmode 'VHT80'
+	option txpower '10'
+	option country 'BG'
+	option cell_density '0'
+
+config wifi-iface 'default_radio0'
+	option device 'radio0'
+	option mode 'ap'
+	option encryption 'none'
+	option ssid 'OpenFest'
+	option isolate '1'
+	option macaddr '00:50:00:00:00:01'
+	option network 'userwifi'
+
+config wifi-device 'radio1'
+	option type 'mac80211'
+	option path 'platform/ahb/18100000.wmac'
+	option channel '1'
+	option band '2g'
+	option htmode 'HT20'
+	option txpower '10'
+	option country 'BG'
+	option cell_density '0'
+
+config wifi-iface 'default_radio1'
+	option device 'radio1'
+	option mode 'ap'
+	option encryption 'none'
+	option ssid 'OpenFest-Legacy'
+	option isolate '1'
+	option macaddr '02:24:00:00:00:01'
+	option network 'userwifi'
+
+config wifi-iface 'wifinet2'
+	option device 'radio0'
+	option mode 'ap'
+	option ssid 'ofvideo'
+	option encryption 'sae-mixed'
+	option macaddr '02:50:FF:00:00:01'
+	option key 'openfest'
+	option network 'videowifi'
+
+config wifi-iface 'wifinet3'
+	option device 'radio1'
+	option mode 'ap'
+	option ssid 'ofvideo'
+	option encryption 'sae-mixed'
+	option macaddr '02:50:FF:00:00:01'
+	option key 'openfest'
+	option network 'videowifi'
+