sync on be, vpn

examples/network/wan-watch.env.example

@@ -0,0 +1,30 @@
+# /etc/conf.d/wan-watch — source from cron on Pi, monstro, FE
+#
+# Deploy ONE file:
+#   sudo cp wan-watch.sh /usr/local/bin/wan-watch.sh && sudo chmod +x /usr/local/bin/wan-watch.sh
+#
+# Cron (every 5 minutes):
+#   */5 * * * * root . /etc/conf.d/wan-watch 2>/dev/null; /usr/local/bin/wan-watch.sh >>/var/log/wan-watch.cron.log 2>&1
+
+WAN_WATCH_LOG=/var/log/wan-watch.log
+WAN_WATCH_ROLE=pi          # pi | router | fe
+
+# Pi
+# ROUTER_PING_TARGET=10.7.6.228
+# FE_PING_TARGET=10.7.0.10
+# BE_PING_TARGET=10.7.16.128
+
+# monstro
+# WAN_WATCH_ROLE=router
+
+# FE
+# WAN_WATCH_ROLE=fe
+# ROUTER_PING_TARGET=10.7.6.228
+
+WAN_WATCH_DEEP=auto        # auto | always | never
+WAN_WATCH_COOLDOWN_S=300   # 5 min between deep captures
+
+# Thresholds (ms)
+# WAN_ALERT_MS=50
+# FE_ALERT_MS=50
+# CONNTRACK_ALERT_PCT=70