#hostname= Buran-bee-stya.reut.loc
#DISTRIB_DESCRIPTION='OpenWrt 24.10.5 r29087-d9c5716d1d'
#profile = beeline_smartbox-turbo-plus
#target  = ramips
#soc     = mt7621
#arch    = mipsel_24kc
#Beeline SmartBox TURBO+ custom default settings
#----------------------------------------------------
#Generating cmd for install pkg
#----------------------------------------------------
opkg install kmod-usb-storage-uas
opkg install usbutils
opkg install block-mount
opkg install kmod-usb3
opkg install kmod-fs-exfat
opkg install kmod-fs-ext4
opkg install prometheus-node-exporter-lua-dawn
opkg install luci-app-dawn
opkg install e2fsprogs
opkg install mount-utils
opkg install iperf3
opkg install vsftpd
opkg install luci-app-hd-idle
#----------------------------------------------------
#Generating configuration Beeline SmartBox TURBO+
#----------------------------------------------------
uci -q batch << EOI
set dawn.@local[0]=local
set dawn.@local[0].loglevel='0'
set dawn.@network[0]=network
set dawn.@network[0].broadcast_ip='10.0.0.255'
set dawn.@network[0].broadcast_port='1025'
set dawn.@network[0].tcp_port='1026'
set dawn.@network[0].network_option='2'
set dawn.@network[0].shared_key='Niiiiiiiiiiiiick'
set dawn.@network[0].iv='Niiiiiiiiiiiiick'
set dawn.@network[0].use_symm_enc='0'
set dawn.@network[0].collision_domain='-1'
set dawn.@network[0].bandwidth='-1'
set dawn.@hostapd[0]=hostapd
set dawn.@hostapd[0].hostapd_dir='/var/run/hostapd'
set dawn.@times[0]=times
set dawn.@times[0].con_timeout='60'
set dawn.@times[0].update_client='10'
set dawn.@times[0].remove_client='15'
set dawn.@times[0].remove_probe='30'
set dawn.@times[0].remove_ap='460'
set dawn.@times[0].update_hostapd='10'
set dawn.@times[0].update_tcp_con='10'
set dawn.@times[0].update_chan_util='5'
set dawn.@times[0].update_beacon_reports='20'
set dawn.global=metric
set dawn.global.min_probe_count='3'
set dawn.global.bandwidth_threshold='6'
set dawn.global.use_station_count='0'
set dawn.global.max_station_diff='1'
set dawn.global.eval_probe_req='0'
set dawn.global.eval_auth_req='0'
set dawn.global.eval_assoc_req='0'
set dawn.global.kicking='3'
set dawn.global.kicking_threshold='20'
set dawn.global.deny_auth_reason='1'
set dawn.global.deny_assoc_reason='17'
set dawn.global.min_number_to_kick='3'
set dawn.global.chan_util_avg_period='3'
set dawn.global.set_hostapd_nr='0'
set dawn.global.duration='0'
set dawn.global.rrm_mode='pat'
set dawn.802_11g=metric
set dawn.802_11g.initial_score='80'
set dawn.802_11g.ht_support='5'
set dawn.802_11g.vht_support='5'
set dawn.802_11g.no_ht_support='0'
set dawn.802_11g.no_vht_support='0'
set dawn.802_11g.rssi='15'
set dawn.802_11g.rssi_val='-60'
set dawn.802_11g.low_rssi_val='-80'
set dawn.802_11g.low_rssi='-15'
set dawn.802_11g.chan_util='0'
set dawn.802_11g.chan_util_val='140'
set dawn.802_11g.max_chan_util='-15'
set dawn.802_11g.max_chan_util_val='170'
set dawn.802_11g.rssi_weight='0'
set dawn.802_11g.rssi_center='-70'
set dawn.802_11a=metric
set dawn.802_11a.initial_score='100'
set dawn.802_11a.ht_support='5'
set dawn.802_11a.vht_support='5'
set dawn.802_11a.no_ht_support='0'
set dawn.802_11a.no_vht_support='0'
set dawn.802_11a.rssi='15'
set dawn.802_11a.rssi_val='-60'
set dawn.802_11a.low_rssi_val='-80'
set dawn.802_11a.low_rssi='-15'
set dawn.802_11a.chan_util='0'
set dawn.802_11a.chan_util_val='140'
set dawn.802_11a.max_chan_util='-15'
set dawn.802_11a.max_chan_util_val='170'
set dawn.802_11a.rssi_weight='0'
set dawn.802_11a.rssi_center='-70'
commit dawn
set dhcp.@dnsmasq[0]=dnsmasq
set dhcp.@dnsmasq[0].domainneeded='1'
set dhcp.@dnsmasq[0].boguspriv='1'
set dhcp.@dnsmasq[0].filterwin2k='0'
set dhcp.@dnsmasq[0].localise_queries='1'
set dhcp.@dnsmasq[0].rebind_protection='1'
set dhcp.@dnsmasq[0].rebind_localhost='1'
set dhcp.@dnsmasq[0].local='/lan/'
set dhcp.@dnsmasq[0].domain='lan'
set dhcp.@dnsmasq[0].expandhosts='1'
set dhcp.@dnsmasq[0].nonegcache='0'
set dhcp.@dnsmasq[0].cachesize='1000'
set dhcp.@dnsmasq[0].authoritative='1'
set dhcp.@dnsmasq[0].readethers='1'
set dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
set dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.d/resolv.conf.auto'
set dhcp.@dnsmasq[0].nonwildcard='1'
set dhcp.@dnsmasq[0].localservice='1'
set dhcp.@dnsmasq[0].ednspacket_max='1232'
set dhcp.@dnsmasq[0].filter_aaaa='0'
set dhcp.@dnsmasq[0].filter_a='0'
set dhcp.lan=dhcp
set dhcp.lan.interface='lan'
set dhcp.lan.start='100'
set dhcp.lan.limit='150'
set dhcp.lan.leasetime='12h'
set dhcp.lan.dhcpv4='server'
set dhcp.lan.dhcpv6='server'
set dhcp.lan.ra='server'
set dhcp.lan.ra_flags='managed-config' 'other-config'
set dhcp.lan.ignore='1'
set dhcp.wan=dhcp
set dhcp.wan.interface='wan'
set dhcp.wan.ignore='1'
set dhcp.odhcpd=odhcpd
set dhcp.odhcpd.maindhcp='0'
set dhcp.odhcpd.leasefile='/tmp/hosts/odhcpd'
set dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
set dhcp.odhcpd.loglevel='4'
set dhcp.odhcpd.piofolder='/tmp/odhcpd-piofolder'
commit dhcp
set dropbear.main=dropbear
set dropbear.main.enable='1'
set dropbear.main.PasswordAuth='on'
set dropbear.main.RootPasswordAuth='on'
set dropbear.main.Port='22'
commit dropbear
set firewall.@defaults[0]=defaults
set firewall.@defaults[0].syn_flood='1'
set firewall.@defaults[0].input='REJECT'
set firewall.@defaults[0].output='ACCEPT'
set firewall.@defaults[0].forward='REJECT'
set firewall.@zone[0]=zone
set firewall.@zone[0].name='lan'
set firewall.@zone[0].input='ACCEPT'
set firewall.@zone[0].output='ACCEPT'
set firewall.@zone[0].forward='ACCEPT'
set firewall.@zone[0].network='lan'
set firewall.@zone[1]=zone
set firewall.@zone[1].name='wan'
set firewall.@zone[1].input='REJECT'
set firewall.@zone[1].output='ACCEPT'
set firewall.@zone[1].forward='REJECT'
set firewall.@zone[1].masq='1'
set firewall.@zone[1].mtu_fix='1'
set firewall.@zone[1].network='wan' 'wan6'
set firewall.@forwarding[0]=forwarding
set firewall.@forwarding[0].src='lan'
set firewall.@forwarding[0].dest='wan'
set firewall.@rule[0]=rule
set firewall.@rule[0].name='Allow-DHCP-Renew'
set firewall.@rule[0].src='wan'
set firewall.@rule[0].proto='udp'
set firewall.@rule[0].dest_port='68'
set firewall.@rule[0].target='ACCEPT'
set firewall.@rule[0].family='ipv4'
set firewall.@rule[1]=rule
set firewall.@rule[1].name='Allow-Ping'
set firewall.@rule[1].src='wan'
set firewall.@rule[1].proto='icmp'
set firewall.@rule[1].icmp_type='echo-request'
set firewall.@rule[1].family='ipv4'
set firewall.@rule[1].target='ACCEPT'
set firewall.@rule[2]=rule
set firewall.@rule[2].name='Allow-IGMP'
set firewall.@rule[2].src='wan'
set firewall.@rule[2].proto='igmp'
set firewall.@rule[2].family='ipv4'
set firewall.@rule[2].target='ACCEPT'
set firewall.@rule[3]=rule
set firewall.@rule[3].name='Allow-DHCPv6'
set firewall.@rule[3].src='wan'
set firewall.@rule[3].proto='udp'
set firewall.@rule[3].dest_port='546'
set firewall.@rule[3].family='ipv6'
set firewall.@rule[3].target='ACCEPT'
set firewall.@rule[4]=rule
set firewall.@rule[4].name='Allow-MLD'
set firewall.@rule[4].src='wan'
set firewall.@rule[4].proto='icmp'
set firewall.@rule[4].src_ip='fe80::/10'
set firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
set firewall.@rule[4].family='ipv6'
set firewall.@rule[4].target='ACCEPT'
set firewall.@rule[5]=rule
set firewall.@rule[5].name='Allow-ICMPv6-Input'
set firewall.@rule[5].src='wan'
set firewall.@rule[5].proto='icmp'
set firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
set firewall.@rule[5].limit='1000/sec'
set firewall.@rule[5].family='ipv6'
set firewall.@rule[5].target='ACCEPT'
set firewall.@rule[6]=rule
set firewall.@rule[6].name='Allow-ICMPv6-Forward'
set firewall.@rule[6].src='wan'
set firewall.@rule[6].dest='*'
set firewall.@rule[6].proto='icmp'
set firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
set firewall.@rule[6].limit='1000/sec'
set firewall.@rule[6].family='ipv6'
set firewall.@rule[6].target='ACCEPT'
set firewall.@rule[7]=rule
set firewall.@rule[7].name='Allow-IPSec-ESP'
set firewall.@rule[7].src='wan'
set firewall.@rule[7].dest='lan'
set firewall.@rule[7].proto='esp'
set firewall.@rule[7].target='ACCEPT'
set firewall.@rule[8]=rule
set firewall.@rule[8].name='Allow-ISAKMP'
set firewall.@rule[8].src='wan'
set firewall.@rule[8].dest='lan'
set firewall.@rule[8].dest_port='500'
set firewall.@rule[8].proto='udp'
set firewall.@rule[8].target='ACCEPT'
commit firewall
set fstab.@global[0]=global
set fstab.@global[0].anon_swap='0'
set fstab.@global[0].anon_mount='1'
set fstab.@global[0].auto_swap='1'
set fstab.@global[0].auto_mount='1'
set fstab.@global[0].delay_root='5'
set fstab.@global[0].check_fs='0'
set fstab.@mount[0]=mount
set fstab.@mount[0].target='/mnt/sda'
set fstab.@mount[0].uuid='9d591806-abe2-402b-a114-502e206789ae'
set fstab.@mount[0].enabled='1'
commit fstab
set hd-idle.@hd-idle[0]=hd-idle
set hd-idle.@hd-idle[0].disk='sda'
set hd-idle.@hd-idle[0].enabled='0'
set hd-idle.@hd-idle[0].idle_time_unit='minutes'
set hd-idle.@hd-idle[0].idle_time_interval='10'
commit hd-idle
set luci.main=core
set luci.main.lang='auto'
set luci.main.mediaurlbase='/luci-static/bootstrap'
set luci.main.resourcebase='/luci-static/resources'
set luci.main.ubuspath='/ubus/'
set luci.flash_keep=extern
set luci.flash_keep.uci='/etc/config/'
set luci.flash_keep.dropbear='/etc/dropbear/'
set luci.flash_keep.openvpn='/etc/openvpn/'
set luci.flash_keep.passwd='/etc/passwd'
set luci.flash_keep.opkg='/etc/opkg.conf'
set luci.flash_keep.firewall='/etc/firewall.user'
set luci.flash_keep.uploads='/lib/uci/upload/'
set luci.languages=internal
set luci.sauth=internal
set luci.sauth.sessionpath='/tmp/luci-sessions'
set luci.sauth.sessiontime='3600'
set luci.ccache=internal
set luci.ccache.enable='1'
set luci.themes=internal
set luci.themes.Bootstrap='/luci-static/bootstrap'
set luci.themes.BootstrapDark='/luci-static/bootstrap-dark'
set luci.themes.BootstrapLight='/luci-static/bootstrap-light'
set luci.apply=internal
set luci.apply.rollback='90'
set luci.apply.holdoff='4'
set luci.apply.timeout='5'
set luci.apply.display='1.5'
set luci.diag=internal
set luci.diag.dns='openwrt.org'
set luci.diag.ping='openwrt.org'
set luci.diag.route='openwrt.org'
commit luci
set network.loopback=interface
set network.loopback.device='lo'
set network.loopback.proto='static'
set network.loopback.ipaddr='127.0.0.1'
set network.loopback.netmask='255.0.0.0'
set network.globals=globals
set network.globals.ula_prefix='fdb5:9be6:0229::/48'
set network.globals.packet_steering='1'
set network.@device[0]=device
set network.@device[0].name='br-lan'
set network.@device[0].type='bridge'
set network.@device[0].ports='lan1' 'lan2' 'lan3' 'lan4'
set network.@device[0].ipv6='0'
set network.lan=interface
set network.lan.device='br-lan'
set network.lan.proto='static'
set network.lan.ipaddr='172.16.11.7'
set network.lan.netmask='255.255.255.0'
set network.lan.ip6assign='60'
set network.lan.gateway='172.16.11.1'
set network.lan.dns='172.16.11.1'
set network.lan.delegate='0'
set network.wan=interface
set network.wan.device='wan'
set network.wan.proto='dhcp'
set network.wan6=interface
set network.wan6.device='wan'
set network.wan6.proto='dhcpv6'
set network.@device[1]=device
set network.@device[1].name='mesh0'
set network.@device[1].ipv6='0'
commit network
set openssl.legacy=provider
set openssl.legacy.enabled='1'
commit openssl
set prometheus-node-exporter-lua.main=prometheus-node-exporter-lua
set prometheus-node-exporter-lua.main.listen_interface='loopback'
set prometheus-node-exporter-lua.main.listen_port='9100'
commit prometheus-node-exporter-lua
set radius.@radius[0]=radius
set radius.@radius[0].disabled='1'
set radius.@radius[0].ca_cert='/etc/radius/ca.pem'
set radius.@radius[0].cert='/etc/radius/cert.pem'
set radius.@radius[0].key='/etc/radius/key.pem'
set radius.@radius[0].users='/etc/radius/users'
set radius.@radius[0].clients='/etc/radius/clients'
set radius.@radius[0].auth_port='1812'
set radius.@radius[0].acct_port='1813'
commit radius
set rpcd.@rpcd[0]=rpcd
set rpcd.@rpcd[0].socket='/var/run/ubus/ubus.sock'
set rpcd.@rpcd[0].timeout='30'
set rpcd.@login[0]=login
set rpcd.@login[0].username='root'
set rpcd.@login[0].password='$p$root'
set rpcd.@login[0].read='*'
set rpcd.@login[0].write='*'
commit rpcd
set system.@system[0]=system
set system.@system[0].hostname='Buran-bee-stya.reut.loc'
set system.@system[0].timezone='MSK-3'
set system.@system[0].ttylogin='0'
set system.@system[0].log_size='64'
set system.@system[0].urandom_seed='0'
set system.@system[0].compat_version='1.1'
set system.@system[0].zonename='Europe/Moscow'
set system.@system[0].log_proto='udp'
set system.@system[0].conloglevel='8'
set system.@system[0].cronloglevel='5'
set system.ntp=timeserver
set system.ntp.enabled='1'
set system.ntp.enable_server='0'
set system.ntp.server='0.openwrt.pool.ntp.org' '1.openwrt.pool.ntp.org' '2.openwrt.pool.ntp.org' '3.openwrt.pool.ntp.org'
set system.led_wan=led
set system.led_wan.name='wan'
set system.led_wan.sysfs='blue:wan'
set system.led_wan.trigger='netdev'
set system.led_wan.mode='link tx rx'
set system.led_wan.dev='wan'
commit system
set ubihealthd.ubi0=ubi-device
set ubihealthd.ubi0.device='/dev/ubi0'
set ubihealthd.ubi0.enable='1'
commit ubihealthd
set ubootenv.@ubootenv[0]=ubootenv
set ubootenv.@ubootenv[0].dev='/dev/mtd0'
set ubootenv.@ubootenv[0].offset='0x80000'
set ubootenv.@ubootenv[0].envsize='0x1000'
set ubootenv.@ubootenv[0].secsize='0x20000'
commit ubootenv
set uhttpd.main=uhttpd
set uhttpd.main.listen_http='0.0.0.0:80' '[::]:80'
set uhttpd.main.listen_https='0.0.0.0:443' '[::]:443'
set uhttpd.main.redirect_https='0'
set uhttpd.main.home='/www'
set uhttpd.main.rfc1918_filter='1'
set uhttpd.main.max_requests='3'
set uhttpd.main.max_connections='100'
set uhttpd.main.cert='/etc/uhttpd.crt'
set uhttpd.main.key='/etc/uhttpd.key'
set uhttpd.main.cgi_prefix='/cgi-bin'
set uhttpd.main.lua_prefix='/cgi-bin/luci=/usr/lib/lua/luci/sgi/uhttpd.lua'
set uhttpd.main.script_timeout='60'
set uhttpd.main.network_timeout='30'
set uhttpd.main.http_keepalive='20'
set uhttpd.main.tcp_keepalive='1'
set uhttpd.main.ubus_prefix='/ubus'
set uhttpd.defaults=cert
set uhttpd.defaults.days='397'
set uhttpd.defaults.key_type='ec'
set uhttpd.defaults.bits='2048'
set uhttpd.defaults.ec_curve='P-256'
set uhttpd.defaults.country='ZZ'
set uhttpd.defaults.state='Somewhere'
set uhttpd.defaults.location='Unknown'
set uhttpd.defaults.commonname='OpenWrt'
commit uhttpd
set umdns.@umdns[0]=umdns
set umdns.@umdns[0].jail='1'
set umdns.@umdns[0].network='lan'
commit umdns
set wireless.wifinet1=wifi-iface
set wireless.wifinet1.device='radio1'
set wireless.wifinet1.ifname='mesh0'
set wireless.wifinet1.network='lan'
set wireless.wifinet1.mode='mesh'
set wireless.wifinet1.mesh_id='BuranMesh'
set wireless.wifinet1.encryption='sae'
set wireless.wifinet1.key='23637387581'
set wireless.wifinet1.mesh_fwding='1'
set wireless.wifinet1.mesh_rssi_threshold='0'
set wireless.wifinet1.disabled='1'
set wireless.radio0=wifi-device
set wireless.radio0.type='mac80211'
set wireless.radio0.path='1e140000.pcie/pci0000:00/0000:00:01.0/0000:02:00.0'
set wireless.radio0.band='2g'
set wireless.radio0.channel='auto'
set wireless.radio0.htmode='HT20'
set wireless.radio0.cell_density='0'
set wireless.radio0.country='RU'
set wireless.default_radio0=wifi-iface
set wireless.default_radio0.device='radio0'
set wireless.default_radio0.network='lan'
set wireless.default_radio0.mode='ap'
set wireless.default_radio0.ssid='Buran'
set wireless.default_radio0.encryption='sae-mixed'
set wireless.default_radio0.key='23637387581'
set wireless.default_radio0.disassoc_low_ack='0'
set wireless.default_radio0.ieee80211w='1'
set wireless.default_radio0.ieee80211r='1'
set wireless.default_radio0.mobility_domain='af53'
set wireless.default_radio0.ft_over_ds='0'
set wireless.default_radio0.wpa_disable_eapol_key_retries='1'
set wireless.default_radio0.skip_inactivity_poll='1'
set wireless.default_radio0.ocv='0'
set wireless.wifinet0=wifi-iface
set wireless.radio1=wifi-device
set wireless.radio1.type='mac80211'
set wireless.radio1.path='1e140000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
set wireless.radio1.band='5g'
set wireless.radio1.channel='60'
set wireless.radio1.htmode='VHT160'
set wireless.radio1.cell_density='0'
set wireless.radio1.country='RU'
set wireless.default_radio1=wifi-iface
set wireless.default_radio1.device='radio1'
set wireless.default_radio1.network='lan'
set wireless.default_radio1.mode='ap'
set wireless.default_radio1.ssid='Buran'
set wireless.default_radio1.encryption='sae'
set wireless.default_radio1.key='23637387581'
set wireless.default_radio1.disassoc_low_ack='0'
set wireless.default_radio1.ieee80211w='1'
set wireless.default_radio1.ieee80211r='1'
set wireless.default_radio1.mobility_domain='af53'
set wireless.default_radio1.ft_over_ds='0'
set wireless.default_radio1.wpa_disable_eapol_key_retries='1'
set wireless.default_radio1.skip_inactivity_poll='1'
set wireless.default_radio1.ieee80211k='1'
set wireless.default_radio1.ocv='0'
set wireless.default_radio1.time_zone='MSK-3'
commit wireless
EOI
#----------------------------------------------------
#Generating conf file
#----------------------------------------------------
# WARNING: /etc/mosquitto не существует
# WARNING: /etc/bird.conf не существует
# WARNING: /etc/bird4.conf не существует
# WARNING: /etc/init.d/y_startup не существует
#Gen file /etc/rc.local

mkdir -p "/etc"
cat << 'CFGEOF' > "/etc/rc.local"
# Put your custom commands here that should be executed once
# the system init finished. By default this file does nothing.

exit 0
CFGEOF

#Gen file /etc/init.d/vsftpd

mkdir -p "/etc/init.d"
cat << 'CFGEOF' > "/etc/init.d/vsftpd"
#!/bin/sh /etc/rc.common
# Copyright (C) 2006-2011 OpenWrt.org

START=50

start() {
	mkdir -m 0755 -p /var/run/vsftpd
	service_start /usr/sbin/vsftpd
}

stop() {
	service_stop /usr/sbin/vsftpd
}
CFGEOF

#----------------------------------------------------
#Generating cron
#----------------------------------------------------