Setup

Running bpi-r4 behind the ISP modem/router

1. /etc/config/network

   config interface 'lan'
           ...
           list ipaddr '192.168.1.2/24'
           list dns '192.168.1.1'
           option gateway '192.168.1.1' 
   

2. reload_config

1. apk add block-mount kmod-usb-storage-uas kmod-nvme kmod-usb3 kmod-fs-ext4 kmod-fs-ntfs3 hdparm
2. /etc/config/fstab

   config mount
           option enabled '1'
           option device '/dev/nvme0n1'
           option target '/overlay'
   

3. reload_config
4. block mount
5. reboot

configs lost -> configure as bridged AP again

The out of the box wifi config doesn’t work. Here’s a working config(/etc/config/wireless):

config wifi-device 'radio0'
        option type 'mac80211'
        option path 'soc/11300000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
        option radio '0'
        option band '2g'
        option channel '1'
        option htmode 'EHT20'
        option background_radar '1'
        option cell_density '0'
        option country 'CH'

config wifi-iface 'default_radio0'
        option device 'radio0'
        option network 'lan'
        option mode 'ap'
        option ssid 'OpenWrt2G'
        option encryption 'sae'
        option disassoc_low_ack '0'
        option key '<REDACTED>'

config wifi-device 'radio1'
        option type 'mac80211'
        option path 'soc/11300000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
        option radio '1'
        option band '5g'
        option channel '100'
        option htmode 'EHT80'
        option background_radar '1'
        option cell_density '0'
        option country 'CH'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option network 'lan'
        option mode 'ap'
        option ssid 'OpenWrt5g'
        option encryption 'sae'
        option key '<REDACTED>'
        option ocv '0'

config wifi-device 'radio2'
        option type 'mac80211'
        option path 'soc/11300000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
        option radio '2'
        option band '6g'
        option channel '37'
        option htmode 'EHT80'
        option background_radar '1'
        option cell_density '0'
        option country 'CH'

config wifi-iface 'defaut_radio2'
        option device 'radio2'
        option network 'lan'
        option mode 'ap'
        option ssid 'OpenWrt6G'
        option encryption 'sae'
        option key '<REDACTED>'
        option ieee8021x '0'
        option ieee80211w '2'
        option ieee80211k '1'
        option ocv '0'

1. install zsh

   apk add ca-certificates zsh curl git-http
   sh -c "$(curl -fsSL https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
   which zsh && sed -i -- 's:/bin/ash:'`which zsh`':g' /etc/passwd
   

2. configure vim
   • apk add vim-full
   • ~/.vimrc

     syntax on
     set tabstop=4
     set softtabstop=0 noexpandtab
     set shiftwidth=4
     colorscheme desert
     

1. Change ports in /etc/config/uhttpd
2. echo "export DOMAIN=eschle.ddnss.eu" >> ~/.zshrc
3. apk add dockerd docker-compose

1. Create custom network server

   docker network create --driver bridge --opt com.docker.network.bridge.name=dockerServer server
   

2. Stop dockerd and automatically configure network & firewall

   service dockerd stop
   service dockerd uciadd
   service dockerd uciadd dockerServer dockerServer dockerServer
   

3. /etc/config/firewall

   configure zone dockerServer <-- delete
   config zone 'docker'
           ...
           list network 'dockerServer'
   
   config forwarding
           option src 'docker'
           option dest 'lan'
   
   config forwarding
           option src 'lan'
           option dest 'docker'
   

4. Reload configs and restart services

   reload config
   service firewall restart
   service dockerd start
   

5. verify

   container run -it alpine /bin/ping 8.8.8.8
   docker container run --network=server -it alpine /bin/ping 8.8.8.8
   

1. install sftp server (fix scp -O issue)

   apk add openssh-sftp-server