Reorder default config file

[perguth]

For newly created config files, move private keys to the end:

Order items from "high probability of mangling" to "purely technical"/"super secret" content.

This approach is more hackerspace-friendly. I think most ideally the private key would have its own file even. Then we could revert the main config file permissions to a more user friendly g+r.

[ri-gilfanov]

I think most ideally the private key would have its own file even.

@perguth , hi. You can export the private key to the separate file with the PEM extension. Try use the following command in your unix-like system:

yggdrasil -useconffile /etc/yggdrasil/yggdrasil.conf -exportkey >> /etc/yggdrasil/yggdrasil.pem

Then, you can replace the PrivateKey parameter with the PrivateKeyPath parameter in /etc/yggdrasil/yggdrasil.conf:

PrivateKeyPath: /etc/yggdrasil/yggdrasil.pem

You can also generate a PEM file with a random private key:

yggdrasil -genconf | yggdrasil -useconf -exportkey >> random-private-key.pem

In general, you can separate a configuration delivery and the key generation:

cp -u /your/custom/yggdrasil.conf /etc/yggdrasil/yggdrasil.conf

if [ ! -f /etc/yggdrasil/yggdrasil.pem ]; then
    yggdrasil -genconf | yggdrasil -useconf -exportkey >> /etc/yggdrasil/yggdrasil.pem
fi

I think it is not difficult to make a deb/rpm package with a similar solution