init hostsHEADmaster

9 files changed, 120 insertions, 0 deletions

diff --git a/certs/gernika.be1.glei.ch.asc b/certs/gernika.be1.glei.ch.asc
new file mode 100644
index 0000000..1f46f30
--- /dev/null
+++ b/certs/gernika.be1.glei.ch.asc
@@ -0,0 +1,18 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.5 (GNU/Linux)
+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+=BqFO
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/certs/immer1-1.glei.ch.asc b/certs/immer1-1.glei.ch.asc
new file mode 100644
index 0000000..b130ace
--- /dev/null
+++ b/certs/immer1-1.glei.ch.asc
@@ -0,0 +1,18 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.5 (GNU/Linux)
+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+=+BTB
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/certs/immer4-1.glei.ch.asc b/certs/immer4-1.glei.ch.asc
new file mode 100644
index 0000000..d5112f9
--- /dev/null
+++ b/certs/immer4-1.glei.ch.asc
@@ -0,0 +1,18 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2.0.14 (GNU/Linux)
+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+=CGOr
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/certs/ishell.glei.ch.asc b/certs/ishell.glei.ch.asc
new file mode 100644
index 0000000..dfca1a7
--- /dev/null
+++ b/certs/ishell.glei.ch.asc
@@ -0,0 +1,18 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.10 (GNU/Linux)
+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+=d4x/
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/fetch.sh b/fetch.sh
new file mode 100755
index 0000000..056d70a
--- /dev/null
+++ b/fetch.sh
@@ -0,0 +1,17 @@
+#!/bin/bash
+
+fetch_host=$1
+
+base=`dirname $0`
+
+if [ -z $fetch_host ]; then
+  echo "USAGE: $0 HOST_TO_FETCH_FROM"
+  exit 1
+fi
+
+rm -rf $base/hosts $base/certs
+mkdir $base/certs $base/hosts
+scp root@$fetch_host:/etc/ipsec.d/hosts/*.glei.ch.conf hosts/ > /dev/null
+scp root@$fetch_host:/etc/ipsec.d/certs/*.glei.ch.asc certs/ > /dev/null
+
+chmod u+w * -R
diff --git a/hosts/gernika.be1.glei.ch.conf b/hosts/gernika.be1.glei.ch.conf
new file mode 100644
index 0000000..8e4b09d
--- /dev/null
+++ b/hosts/gernika.be1.glei.ch.conf
@@ -0,0 +1,8 @@
+# host gernika.be1.glei.ch
+conn gernika.be1.glei.ch
+        right=62.12.167.10
+        rightid=@gernika.be1.glei.ch
+        rightcert=gernika.be1.glei.ch.asc
+        rightsubnet=62.12.167.11/32,62.12.167.12/32,62.12.167.13/32,62.12.167.14/32
+        type=transport
+        auto=start
diff --git a/hosts/immer1-1.glei.ch.conf b/hosts/immer1-1.glei.ch.conf
new file mode 100644
index 0000000..59f44ef
--- /dev/null
+++ b/hosts/immer1-1.glei.ch.conf
@@ -0,0 +1,8 @@
+# host immer1-1.glei.ch
+conn immer1-1.glei.ch
+        right=212.103.72.230
+        rightid=@immer1-1.glei.ch
+        rightcert=immer1-1.glei.ch.asc
+        rightsubnet=212.103.72.230/32,212.103.72.232/32,212.103.72.233/32,212.103.72.234/32
+        type=transport
+        auto=start
diff --git a/hosts/immer4-1.glei.ch.conf b/hosts/immer4-1.glei.ch.conf
new file mode 100644
index 0000000..f5c732f
--- /dev/null
+++ b/hosts/immer4-1.glei.ch.conf
@@ -0,0 +1,8 @@
+# host immer4-1.glei.ch
+conn immer4-1.glei.ch
+        right=83.223.73.33
+        rightid=@immer4-1.glei.ch
+        rightcert=immer4-1.glei.ch.asc
+        rightsubnet=83.223.73.34/32,83.223.73.35/32,83.223.73.36/32
+        type=transport
+        auto=start
diff --git a/hosts/ishell.glei.ch.conf b/hosts/ishell.glei.ch.conf
new file mode 100644
index 0000000..627f60b
--- /dev/null
+++ b/hosts/ishell.glei.ch.conf
@@ -0,0 +1,7 @@
+# host ishell.glei.ch
+conn ishell.glei.ch
+        right=212.103.72.229
+        rightid=@ishell.glei.ch
+        rightcert=ishell.glei.ch.asc
+        type=transport
+        auto=start