| extern crate rust_sodium; | |
| use rust_sodium::crypto::auth::hmacsha256; | |
| pub mod crypto { | |
| #[derive(Debug)] | |
| pub enum ErrType { | |
| BadKey, | |
| } |
These are instructions for standing up a Kubernetes cluster with Raspberry Pis with the current Hypriot (1.9.0), with K8S v1.10.2
Thanks to https://gist.github.com/alexellis/fdbc90de7691a1b9edb545c17da2d975 and https://gist.github.com/aaronkjones/d996f1a441bc80875fd4929866ca65ad for doing all the hard work!
http://tinkerman.cat/rpi3_iot_server.pdf (Catalan)
| [Interface] | |
| Address = 10.5.0.1/24 | |
| PrivateKey = <SERVER_PRIVATE_KEY> | |
| ListenPort = 54321 | |
| SaveConfig = false | |
| PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; iptables -A INPUT -s 10.5.0.0/24 -p udp -m udp --dport 53 -m conntrack --ctstate NEW -j ACCEPT | |
| PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; iptables -D INPUT -s 10.5.0.0/24 -p udp -m udp --dport 53 -m conntrack --ctstate NEW -j ACCEPT | |
| # C-1 | |
| [Peer] |
| [Interface] | |
| Address = 10.5.0.3/24 | |
| DNS = 10.5.0.1 | |
| ListenPort = 16200 | |
| MTU = 1280 | |
| PrivateKey = <CLIENT_N-PRIVATE_KEY> | |
| [Peer] | |
| AllowedIPs = 0.0.0.0/0 | |
| Endpoint = <PUBLIC_SERVER_ADDRESS>:54321 |
| include: "/etc/unbound/unbound.conf.d/*.conf" | |
| server: | |
| num-threads: 2 | |
| verbosity: 1 | |
| root-hints: /etc/unbound/root.hints | |
| # auto-trust-anchor-file: /var/lib/unbound/root.key | |
| interface: 0.0.0.0 | |
| interface: ::0 | |
| max-udp-size: 3072 | |
| access-control: 0.0.0.0/0 refuse |
