bird: Make RPKI config'able

1 files changed, 21 insertions, 0 deletions

diff --git a/roles/uvok_bird/templates/clear_rpki.conf.j2 b/roles/uvok_bird/templates/clear_rpki.conf.j2
new file mode 100644
index 0000000..97f869c
--- /dev/null
+++ b/roles/uvok_bird/templates/clear_rpki.conf.j2
@@ -0,0 +1,21 @@
+# managed by Ansible
+
+roa6 table clear_roa_v6;
+
+protocol rpki roa_clearnet1 {
+    roa6 { table clear_roa_v6; };
+    remote {{ uvok_bird_opts.rpki1 }};
+    port 8282;
+    refresh 3600;
+    retry 600;
+    expire 7200;
+}
+
+protocol rpki roa_clearnet2 {
+    roa6 { table clear_roa_v6; };
+    remote {{ uvok_bird_opts.rpki2 }};
+    port 8282;
+    refresh 3600;
+    retry 600;
+    expire 7200;
+}