Luci配置文件

最新推荐文章于 2024-01-12 17:59:45 发布

古古天

最新推荐文章于 2024-01-12 17:59:45 发布

阅读量6.8k

点赞数

分类专栏： Luci 文章标签： Luci

本文链接：https://blog.csdn.net/xing634325131/article/details/22622105

版权

Luci 专栏收录该内容

0 篇文章 0 订阅

订阅专栏

部分文件，仅供参考，具体使用请参照官方说明：http://luci.subsignal.org/api/luci/modules/luci.model.uci.html

1.batmand

config batmand general
	option interface		ath0
	option announce			
	option gateway_class		
	option originator_interval
	option preferred_gateway	
	option routing_class
	option visualisation_srv
	option policy_routing_script

2.ddns

config service "myddns"
	option enabled		"0"


	option service_name	"dyndns.org"
	option domain		"mypersonaldomain.dyndns.org"
	option username		"myusername"
	option password		"mypassword"


	option ip_source	"network" 
	option ip_network	"wan"
	


	option force_interval	"72"
	option force_unit	"hours"
	option check_interval	"10"
	option check_unit	"minutes"


	#option ip_source	"interface"
	#option ip_interface	"eth0.1"


	#option ip_source	"web"
	#option ip_url		"http://www.whatismyip.com/automation/n09230945.asp"


	#option update_url	"http://[USERNAME]:[PASSWORD]@members.dyndns.org/nic/update?hostname=[DOMAIN]&myip=[IP]"

3.dhcp

config dnsmasq
	option domainneeded	1
	option boguspriv	1
	option filterwin2k	'0'  #enable for dial on demand
	option localise_queries	1
	option local	'/lan/'
	option domain	'lan'
	option expandhosts	1
	option nonegcache	0
	option authoritative	1
	option readethers	1
	option leasefile	'/tmp/dhcp.leases'
	option resolvfile	'/tmp/resolv.conf.auto'


config dhcp
	option interface	lan
	option start 	100
	option limit	150
	option leasetime	12h


config dhcp
	option interface	wan
	option ignore	1

4.dropbear

config dropbear
	option PasswordAuth 'on'
	option Port         '22'

5.firewall

config defaults
	option syn_flood	1
	option input		DROP 
	option output		ACCEPT 
	option forward		DROP 


config zone
	option name		lan
	option input	ACCEPT 
	option output	ACCEPT 
	option forward	DROP 


config zone
	option name		wan
	option input	DROP 
	option output	ACCEPT 
	option forward	DROP 
	option masq		1 


config forwarding 
	option src      lan
	option dest     wan




### EXAMPLE CONFIG SECTIONS
# do not allow a specific ip to access wan
#config rule
#	option src		lan
#	option src_ip	192.168.45.2
#	option dest		wan
#	option proto	tcp
#	option target	REJECT 


# block a specific mac on wan
#config rule
#	option dest		wan
#	option src_mac	00:11:22:33:44:66
#	option target	REJECT 


# block incoming ICMP traffic on a zone
#config rule
#	option src		lan
#	option proto	ICMP
#	option target	DROP


# port redirect port coming in on wan to lan
#config redirect
#	option src			wan
#	option src_dport	80
#	option dest			lan
#	option dest_ip		192.168.16.235
#	option dest_port	80 
#	option protocol		tcp


# include a file with users custom iptables rules
#config include
#	option path /etc/firewall.user




### FULL CONFIG SECTIONS
#config rule
#	option src		lan
#	option src_ip	192.168.45.2
#	option src_mac	00:11:22:33:44:55
#	option src_port	80
#	option dest		wan
#	option dest_ip	194.25.2.129
#	option dest_port	120
#	option proto	tcp
#	option target	REJECT 


#config redirect
#	option src		lan
#	option src_ip	192.168.45.2
#	option src_mac	00:11:22:33:44:55
#	option src_port		1024
#	option src_dport	80
#	option dest_ip	194.25.2.129
#	option dest_port	120
#	option proto	tcp

6.fatab

config mount
	option target	/home
	option device	/dev/sda1
	option fstype	ext3
	option options	rw,sync
	option enabled	0


config swap
	option device	/dev/sda2
	option enabled	0

7.httpd

config 'httpd'
	option 'port' '80'
	option 'home' '/www'

8.luci

config 'core' 'main'
	option 'lang' 'auto'
	option 'resourcebase' '/luci-static/resources'
	option '_niuinit' '1'
	option 'mediaurlbase' '/luci-static/Todaair'


config 'extern' 'flash_keep'
	option 'uci' '/etc/config/'
	option 'dropbear' '/etc/dropbear/'
	option 'openvpn' '/etc/openvpn/'
	option 'passwd' '/etc/passwd'
	option 'opkg' '/etc/opkg.conf'
	option 'firewall' '/etc/firewall.user'
	option 'uploads' '/lib/uci/upload/'


config 'internal' 'languages'
	option 'pt_br' 'Português (Brasil)'
	option 'de' 'Deutsch'
	option 'fr' 'Français'
	option 'he' 'עִבְרִית'
	option 'es' 'Español'
	option 'ro' 'Română'
	option 'it' 'Italiano'
	option 'pt' 'Português'
	option 'no' 'Norsk'
	option 'ru' 'Русский'
	option 'ms' 'Bahasa Melayu'
	option 'ja' '日本語'
	option 'ca' 'Català'
	option 'el' 'Ελληνικά'
	option 'vi' 'Tiếng Việt'
	option 'en' 'English'
	option 'zh_cn' 'chinese'


config 'internal' 'sauth'
	option 'sessionpath' '/tmp/luci-sessions'
	option 'sessiontime' '3600'


config 'internal' 'ccache'
	option 'enable' '1'


config 'internal' 'themes'
	option 'Fledermaus' '/luci-static/fledermaus'
	option 'Todaair' '/luci-static/Todaair'
	option 'Freifunk_BNO' '/luci-static/freifunk-bno'
	option 'OpenWrt' '/luci-static/openwrt.org'
	option 'Freifunk' '/luci-static/freifunk'
	option 'MyTheme' '/luci-static/Todaair'
	option 'Freifunk_Hannover' '/luci-static/freifunk-hannover'
	option 'Freifunk_Generic' '/luci-static/freifunk-generic'
	option 'OpenWrtOxygen' '/luci-static/openwrt.org-oxygen'
	option 'Oxygen' '/luci-static/oxygen'

9.lucid

config lucid main
	option pollinterval 15000
	option daemon 1
	option debug 1
	list supports tcpserver
	list supports server


config DirectoryPublisher webroot
	option name 'Webserver Share'
	option physical host/www
	option virtual ''
	option domain ''
	
config LuciWebPublisher luciweb
	option name 'LuCI Webapplication'
	option physical ''
	list virtual /luci
	option domain ''
	option home 1
	
config RPCPublisher	mainrpc
	option namespace 'luci.lucid.rpc'
	list export system
	list export ruci
	list exec ':lo'
	list exec 'root'


config tcpserver httpd
	option entrypoint "luci.lucid.http"
	list supports DirectoryPublisher
	list supports LuciWebPublisher
	
config tcpserver rpcd
	option entrypoint "luci.lucid.rpc"
	list supports RPCPublisher


config daemon http
	option slave httpd
	list address 8080
	list publisher webroot
	list publisher luciweb
	option enabled 1
	
config daemon https
	option slave httpd
	list address 4443
	list publisher webroot
	list publisher luciweb
	option enabled 1
	option encryption enable
	option tls sdk_tls
	
config tls sdk_tls
	option generate 1
	option key /tmp/lucid-tls.key
	option cert /tmp/lucid-tls.cert
	option type asn1


config daemon rpc
	option slave rpcd
	list address 12900
	list publisher mainrpc
	option enabled 1
	
config 'daemon' 'splashr'
        option 'slave' 'httpd'
        list 'address' '8082'
        list 'publisher' 'splashredir'
        option 'enabled' '1'


config 'Redirector' 'splashredir'
        option 'name' 'Splashd'
        option 'virtual' '/'
        option 'physical' ':80/luci/splash'

10.luci_devinfo

config 'smap_scannet' 'SIP_LAN'
        option 'enable' '0'
	option 'interface' 'lan'
	option 'subnet' '192.168.99.0/24'
	option 'ports'	'5060'
	option 'timeout' '10'
	option 'repeat_count' '1'
	option 'sleepreq' '100'
	
config 'smap_scannet' 'SIP_WAN'
        option 'enable' '0'
	option 'interface' 'wan'
	option 'subnet' '216.218.0.0/16'


config 'netdiscover_scannet' 'SCAN_LAN'
        option 'enable' '0'
	option 'interface' 'lan'
	option 'subnet' '192.168.99.0/24'
	
config 'netdiscover_scannet' 'SCAN_WAN'
        option 'enable' '0'
	option 'interface' 'wan'
	option 'subnet' '216.218.0.0/16'
	option 'ports'	'5060'
	option 'timeout' '10'
	option 'repeat_count' '1'
	option 'sleepreq' '100'

11.luci_olsr

config 'olsr' 'general'
	option 'resolve' '1'

12.luci_splash

config core general
	option leasetime 1

13.luci_statistics

config 'statistics' 'rrdtool'
        option 'default_timespan' '1hour'
        option 'image_width' '600'
        option 'image_path' '/tmp/rrdimg'


config 'statistics' 'collectd'
	option 'BaseDir' '/var/run/collectd'
	option 'Include' '/etc/collectd/conf.d'
	option 'PIDFile' '/var/run/collectd.pid'
	option 'PluginDir' '/usr/lib/collectd'
	option 'TypesDB' '/usr/share/collectd/types.db'
	option 'Interval' '30'
	option 'ReadThreads' '2'


config 'statistics' 'collectd_ping'
	option 'enable' '0'
	option 'TTL' '127'
	option 'Interval' '30'
	option 'Hosts' '127.0.0.1'


config 'statistics' 'collectd_csv'
	option 'enable' '0'
	option 'StoreRates' '0'
	option 'DataDir' '/tmp'


config 'statistics' 'collectd_df'
	option 'enable' '0'
	option 'Devices' '/dev/mtdblock/4'
	option 'MountPoints' '/jffs'
	option 'FSTypes' 'tmpfs'
	option 'IgnoreSelected' '0'


config 'statistics' 'collectd_disk'
	option 'enable' '0'
	option 'Disks' 'hda1 hdb'
	option 'IgnoreSelected' '0'


config 'statistics' 'collectd_dns'
	option 'enable' '0'
	option 'Interfaces' 'ffdhcp ff br-lan'
	option 'IgnoreSources' '127.0.0.1'


config 'statistics' 'collectd_email'
	option 'enable' '0'
	option 'SocketFile' '/var/run/collectd/email.sock'
	option 'SocketGroup' 'nogroup'


config 'statistics' 'collectd_exec'
	option 'enable' '1'


config 'collectd_exec_input'
	option 'cmdline' '/usr/bin/stat-input-olsr'


config 'collectd_exec_notify'
	option 'cmdline' '/usr/bin/stat-output-syslog'


config 'statistics' 'collectd_interface'
	option 'enable' '1'
	option 'Interfaces' 'br-lan br-ff'
	option 'IgnoreSelected' '0'


config 'statistics' 'collectd_iptables'
	option 'enable' '1'


config 'collectd_iptables_match'
	option 'table' 'nat'
	option 'chain' 'luci_fw_postrouting'
	option 'target' 'MASQUERADE'
	option 'source' '192.168.1.0/24'
	option 'outputif' 'br-ff'
	option 'name' 'Verkehr LAN-Clients'


config 'collectd_iptables_match'
	option 'chain' 'luci_fw_postrouting'
	option 'table' 'nat'
	option 'target' 'MASQUERADE'
	option 'source' '10.61.230.0/24'
	option 'outputif' 'br-ff'
	option 'name' 'Verkehr WLAN-Clients'


config 'statistics' 'collectd_irq'
	option 'enable' '0'
	option 'Irqs' '2 3 4 7'


config 'statistics' 'collectd_load'
	option 'enable' '1'


config 'statistics' 'collectd_logfile'
	option 'enable' '0'
	option 'LogLevel' 'notice'
	option 'File' '/var/log/collectd.log'
	option 'Timestamp' '1'


config 'statistics' 'collectd_netlink'
	option 'enable' '0'
	option 'IgnoreSelected' '0'
	option 'VerboseInterfaces' 'br-lan br-ff'
	option 'QDiscs' 'br-lan br-ff'


config 'statistics' 'collectd_network'
	option 'enable' '0'


config 'collectd_network_listen'
	option 'host' '0.0.0.0'


config 'collectd_network_server'
	option 'host' '0.0.0.0'


config 'statistics' 'collectd_processes'
	option 'enable' '1'


config 'statistics' 'collectd_tcpconns'
	option 'enable' '1'
	option 'ListeningPorts' '0'
	option 'LocalPorts' '22 80'


config 'statistics' 'collectd_unixsock'
	option 'enable' '0'
	option 'SocketFile' '/var/run/collectd/query.sock'
	option 'SocketGroup' 'nogroup'


config 'statistics' 'collectd_wireless'
	option 'enable' '1'


config 'statistics' 'collectd_cpu'
	option 'enable' '1'


config 'statistics' 'collectd_rrdtool'
	option 'enable' '1'
	option 'DataDir' '/tmp'
	option 'RRARows' '100'
	option 'RRASingle' '1'
	option 'RRATimespans' '10min 1hour 1day 1week 1month 1year'

14.mactodevinfo

config 'mactodevinfo'
	option 'maclow' '00:19:15:00:00:00'
	option 'machigh' '00:19:15:ff:ff:ff'
	option 'vendor' 'Vertical Communications'
	option 'devtype' 'SIP devices'
	option 'model' 'varies'
	option 'ouiowneroverride' 'Some company'
	option 'name' 'Vertical XIP and Phones'

15.network

#### VLAN configuration 
config switch eth0
	option vlan0	"0 1 2 3 5*"
	option vlan1	"4 5"




#### Loopback configuration
config interface loopback
	option ifname	"lo"
	option proto	static
	option ipaddr	127.0.0.1
	option netmask	255.0.0.0




#### LAN configuration
config interface lan
	option type 	bridge
	option ifname	"eth0"
	option proto	static
	option ipaddr	192.168.1.1
	option netmask	255.255.255.0




#### WAN configuration
config interface	wan
	option ifname	"wlan0"
	option proto	dhcp

16.ntpclient

config ntpserver
	option hostname '0.openwrt.pool.ntp.org'
	option port     '123'


config ntpserver
	option hostname '1.openwrt.pool.ntp.org'
	option port     '123'


config ntpserver
	option hostname '2.openwrt.pool.ntp.org'
	option port     '123'


config ntpserver
	option hostname '3.openwrt.pool.ntp.org'
	option port     '123'


config ntpdrift
	option freq     '0'


config ntpclient
	option interval	60
	#option count	10

17.openvpn_recipes

#
# Routed point-to-point server
#
config openvpn_recipe server_tun_ptp
	option _description		"Simple server configuration for a routed point-to-point VPN"
	option _role			"server"
	option dev			"tun"
	option ifconfig			"10.0.0.1 10.0.0.2"
	option secret			"shared-secret.key"
	option keepalive		"10 60"
	option comp_lzo			"1"
	option verb			"3"
        option mssfix			"1420"
	option management		"127.0.0.1 31194"


#
# Routed point-to-point client
#
config openvpn_recipe client_tun_ptp
	option _description		"Simple client configuration for a routed point-to-point VPN"
	option _role			"client"
	option dev			"tun"
	list   remote			"vpnserver.example.org"
	option ifconfig			"10.0.0.2 10.0.0.1"
	option secret			"shared-secret.key"
	option nobind			"1"
	option comp_lzo			"1"
	option verb			"3"
	option management		"127.0.0.1 31194"


#
# Routed multi-client server
#
config openvpn_recipe server_tun
	option _description		"Server configuration for a routed multi-client VPN"
	option _role			"server"
	option dev			"tun"
	option server			"10.0.100.0 255.255.255.0"
	option ca			"ca.crt"
	option cert			"server.crt"
	option key 			"server.key"
	option dh 			"dh1024.pem"
	option keepalive		"10 60"
	option comp_lzo			"1"
	option verb			"3"
        option mssfix			"1420"
	option management		"127.0.0.1 31194"


#
# Routed client
#
config openvpn_recipe client_tun
	option _description		"Client configuration for a routed multi-client VPN"
	option _role			"client"
	option client			"1"
	option dev			"tun"
	list   remote			"vpnserver.example.org"
	option pkcs12			"my_client.p12"
	option remote_cert_tls		"server"
	option comp_lzo			"1"
	option nobind			"1"
	option persist_key		"1"
	option persist_tun		"1"
	option verb			"3"
	option reneg_sec		"0"
	option float			"1"
	option management		"127.0.0.1 31194"


#
# Multi-client ethernet bridge server
#
config openvpn_recipe server_tap_bridge
	option _description		"Server configuration for an ethernet bridge VPN"
	option _role			"server"
	option dev			"tap"
	option server_bridge		"192.168.1.1 255.255.255.0 192.168.1.128 192.168.1.254"
	option ca			"ca.crt"
	option cert			"server.crt"
	option key 			"server.key"
	option dh 			"dh1024.pem"
	option keepalive		"10 60"
	option comp_lzo			"1"
	option verb			"3"
        option mssfix			"1420"
	option management		"127.0.0.1 31194"


#
# Ethernet bridge client
#
config openvpn_recipe client_tap_bridge
	option _description		"Client configuration for an ethernet bridge VPN"
	option _role			"client"
	option client			"1"
	option dev 			"tap"
	list   remote			"vpnserver.example.org"
	option ca 			"ca.crt"
	option cert			"my_client.crt"
	option key 			"my_client.key"
	option dh 			"dh1024.pem"
	option remote_cert_tls		"server"
	option comp_lzo			"1"
	option nobind			"1"
	option persist_key		"1"
	option verb			"3"
	option reneg_sec		"0"
	option float			"1"
	option management		"127.0.0.1 31194"

18.pbx

config 'main' 'connection_status'

19.pbx-advanced

config 'settings' 'advanced'
        option 'useragent' 'PBX'
        option 'ringtime' '30'
        option 'rtpstart' '19850'
        option 'rtpend' '19900'

20.pbx-calls

config 'call_routing' 'outgoing_calls'


config 'call_routing' 'incoming_calls'


config 'call_routing' 'providers_user_can_use'


config 'call_routing' 'blacklisting'

21.pbx-google

22.pbx-users

config 'user' 'server'

22.pbx-voicemail

config 'voicemail' 'global_voicemail'


config 'voicemail' 'voicemail_smtp'


config 'voicemail' 'voicemail_log'

23.pbx-voip

24.qos

# QoS configuration for OpenWrt


# INTERFACES:
config interface wan
	option classgroup  "Default"
	option enabled      1
	option overhead     1
	option upload       128
	option download     1024


# RULES:
config classify
	option target       "Bulk"
	option ipp2p        "all"
config classify
	option target       "Bulk"
	option layer7       "edonkey"
config classify
	option target       "Bulk"
	option layer7       "bittorrent"
config classify
	option target       "Priority"
	option ports        "22,53"
config classify
	option target       "Normal"
	option proto        "tcp"
	option ports        "20,21,25,80,110,443,993,995"
config classify
	option target       "Express"
	option ports        "5190"
config default
	option target       "Express"
	option proto        "udp"
	option pktsize      "-500"
config reclassify
	option target       "Priority"
	option proto        "icmp"
config default
	option target       "Bulk"
	option portrange    "1024-65535"
config reclassify
	option target       "Priority"
	option proto        "tcp"
	option pktsize      "-128"
	option mark         "!Bulk"
	option tcpflags     "SYN"
config reclassify
	option target       "Priority"
	option proto        "tcp"
	option pktsize      "-128"
	option mark	        "!Bulk"
	option tcpflags     "ACK"




# Don't change the stuff below unless you
# really know what it means :)


config classgroup "Default"
	option classes      "Priority Express Normal Bulk"
	option default      "Normal"




config class "Priority"
	option packetsize  400
	option maxsize     400
	option avgrate     10
	option priority    20
config class "Priority_down"
	option packetsize  1000
	option avgrate     10




config class "Express"
	option packetsize  1000
	option maxsize     800
	option avgrate     50
	option priority    10


config class "Normal"
	option packetsize  1500
	option packetdelay 100
	option avgrate     10
	option priority    5
config class "Normal_down"
	option avgrate     20


config class "Bulk"
	option avgrate     1
	option packetdelay 200

25.siit

config siit ipv4
	option pool			"77.87.52.0/22"
	option netsize			"29"


config siit ipv6
	option ula_prefix		"fd00::"
	option ula_global		"00ca:ffee:babe::"
	option ula_subnet		"0000:0000:0000:dada::"
	option siit_prefix		"::ffff:0000:0000"


config siit wifi
	option essid			"6mesh.freifunk.net"
	option bssid			"02:25:c3:ca:ff:ee"
	option channel			"1"

26.system

config 'system'
	option 'hostname' 'OpenWrt'
	option 'zonename' 'UTC'
	option 'timezone' 'GMT0'
	option 'conloglevel' '8'
	option 'cronloglevel' '8'

27.ucitrack

config 'network'
	option 'init' 'network'
	list 'affects' 'dhcp'
	list 'affects' 'radvd'


config 'wireless'
	list 'affects' 'network'


config 'firewall'
	option 'init' 'firewall'
	list 'affects' 'luci-splash'
	list 'affects' 'qos'
	list 'affects' 'miniupnpd'


config 'olsr'
	option 'init' 'olsrd'


config 'dhcp'
	option 'init' 'dnsmasq'


config 'dropbear'
	option 'init' 'dropbear'


config 'httpd'
	option 'init' 'httpd'


config 'fstab'
	option 'init' 'fstab'


config 'qos'
	option 'init' 'qos'


config 'system'
	option 'init' 'led'
	list 'affects' 'luci_statistics'


config 'luci_splash'
	option 'init' 'luci_splash'


config 'upnpd'
	option 'init' 'miniupnpd'


config 'ntpclient'
	option 'init' 'ntpclient'


config 'samba'
	option 'init' 'samba'


config 'tinyproxy'
	option 'init' 'tinyproxy'


config 'meshwizard' 'meshwizard'
	option 'exec' '/etc/init.d/wizard boot'


config 'p910nd'
	option 'init' 'p910nd'


config 'radvd'
	option 'init' 'radvd'


config 'freifunk_p2pblock'
	option 'init' 'freifunk-p2pblock'


config 'luci_statistics'
	option 'init' 'luci_statistics'


config 'ushare'
	option 'init' 'ushare'


config 'olsrd'
	option 'init' 'olsrd'


config 'vnstat'
	option 'init' 'vnstat'


config 'mmc_over_gpio'
	option 'init' 'mmc_over_gpio'


config 'polipo'
	option 'init' 'polipo'


config 'ahcpd'
	option 'init' 'ahcpd'


config 'hd-idle'
	option 'init' 'hd-idle'


config 'wshaper' 'wshaper'
	option 'exec' '/etc/init.d/wshaper start'

28.upnpd

config upnpd config
	option log_output	0
	option download 	1024
	option upload   	512

29.wireless

config wifi-device  wifi0
	option type     atheros
	option channel  auto
	option disabled 0


config wifi-iface
	option device	wifi0
	option network	lan
	option mode	ap
	option ssid	OpenWrt
	option encryption none


	# Fake active wifi
	option ifname	ath0
	option up		1

古古天

关注

0
点赞
踩
2

收藏

觉得还不错? 一键收藏
0
评论
Luci配置文件

部分文件，仅供参考，具体使用请参照官方说明：http://luci.subsignal.org/api/luci/modules/luci.model.uci.html1.batmandconfig batmand general option interface ath0 option announce option gateway_class option orig
复制链接

扫一扫