add peer

nodes/fsn1/named/named.conf

@@ -8,7 +8,7 @@ options {
     dnssec-enable no;
     dnssec-validation no;
 
-    allow-recursion { ::1; 127.0.0.1; 172.20.177.32/27; fdff:b02d:2ef7::/64; 2a01:4f8:241:f98::/64; 136.243.185.240/29; };
+    allow-recursion { ::1; 127.0.0.1; 172.17.0.0/16; 172.20.177.32/27; fdff:b02d:2ef7::/64; 2a01:4f8:241:f98::/64; 136.243.185.240/29; 10.77.77.77; };
     allow-transfer { none; };
     allow-update { none; };
 
@@ -21,6 +21,11 @@ options {
 
 
 
+zone "acme.dn42" {
+    type master;
+    file "acme.dn42.zone";
+};
+
 zone "zotan.dn42" {
     type master;
     file "zotan.dn42.zone";

nodes/hel1/bird2/bird/peers/AS4242423360_dynos01.conf

@@ -0,0 +1,7 @@
+protocol bgp AS4242423360_dynos01 from dnpeers {
+        neighbor 172.20.143.65 as 4242423360;
+}
+
+protocol bgp AS4242423360_dynos01_v6 from dnpeers {
+        neighbor fe80::fcd4%dn42p4 as 4242423360;
+}

nodes/hel1/systemd-networkd/dn42p4.netdev

@@ -0,0 +1,13 @@
+[NetDev]
+Name = dn42p4
+Kind = wireguard
+Description = WireGuard
+
+[WireGuard]
+ListenPort = 42424
+PrivateKeyFile = /etc/wireguard/private.key
+
+[WireGuardPeer]
+PublicKey = eOXW7NutUAknWIMUbyhG8VGJj/huWHTc3e50zMM15G8=
+Endpoint = se01.dn42.baka.dev:42341
+AllowedIPs = 172.16.0.0/12,10.0.0.0/8,fd00::/8,fe80::/10,ff00::/8

nodes/hel1/systemd-networkd/dn42p4.network

@@ -0,0 +1,10 @@
+[Match]
+Name = dn42p4
+
+[Address]
+Address = 172.20.177.35/32
+Peer = 172.20.143.65/32
+
+[Address]
+Address = fe80::4/128
+Peer = fe80::fcd4/128