109 lines
2.7 KiB
Bash
109 lines
2.7 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# ============================================
|
|
# Lifecycle
|
|
# ============================================
|
|
|
|
function config::on_load() {
|
|
config::validate
|
|
}
|
|
|
|
# ============================================
|
|
# Server
|
|
# ============================================
|
|
|
|
WG_INTERFACE="wg0"
|
|
WG_CONFIG="$(ctx::wg)/${WG_INTERFACE}.conf"
|
|
WG_SERVER_PUBLIC_KEY_FILE="$(ctx::wg)/server_public.key"
|
|
WG_SERVER_PRIVATE_KEY_FILE="$(ctx::wg)/server_private.key"
|
|
WG_ENDPOINT="wg.krilio.net:51820"
|
|
WG_DNS="10.0.0.103"
|
|
WG_LISTEN_PORT="51820"
|
|
WG_SUBNET="10.1.0.0/16"
|
|
|
|
# ============================================
|
|
# Device Type → Subnet Mapping
|
|
# ============================================
|
|
|
|
declare -gA DEVICE_SUBNETS=(
|
|
[desktop]="10.1.1"
|
|
[laptop]="10.1.2"
|
|
[phone]="10.1.3"
|
|
[tablet]="10.1.4"
|
|
[guest]="10.1.100"
|
|
)
|
|
|
|
# ============================================
|
|
# Device Type → Default AllowedIPs
|
|
# ============================================
|
|
|
|
declare -gA DEVICE_ALLOWED_IPS=(
|
|
[desktop]="0.0.0.0/0"
|
|
[laptop]="0.0.0.0/0"
|
|
[phone]="0.0.0.0/0"
|
|
[tablet]="0.0.0.0/0"
|
|
[guest]="0.0.0.0/0"
|
|
)
|
|
|
|
# ============================================
|
|
# Accessors
|
|
# ============================================
|
|
|
|
function config::interface() { echo "$WG_INTERFACE"; }
|
|
function config::config_file() { echo "$WG_CONFIG"; }
|
|
function config::endpoint() { echo "$WG_ENDPOINT"; }
|
|
function config::dns() { echo "$WG_DNS"; }
|
|
function config::listen_port() { echo "$WG_LISTEN_PORT"; }
|
|
function config::subnet() { echo "$WG_SUBNET"; }
|
|
|
|
function config::server_public_key() {
|
|
cat "$WG_SERVER_PUBLIC_KEY_FILE"
|
|
}
|
|
|
|
function config::device_types() {
|
|
local types
|
|
{ set +u; types="${!DEVICE_SUBNETS[@]}"; set -u; }
|
|
echo "$types"
|
|
}
|
|
|
|
function config::is_valid_type() {
|
|
local type="$1"
|
|
local subnet
|
|
subnet=$(config::subnet_for "$type")
|
|
[[ -n "$subnet" ]]
|
|
}
|
|
|
|
function config::subnet_for() {
|
|
local type="$1"
|
|
local result
|
|
{ set +u; result="${DEVICE_SUBNETS[$type]:-}"; set -u; }
|
|
echo "$result"
|
|
}
|
|
|
|
function config::allowed_ips_for() {
|
|
local type="$1"
|
|
local result
|
|
{ set +u; result="${DEVICE_ALLOWED_IPS[$type]:-0.0.0.0/0}"; set -u; }
|
|
echo "$result"
|
|
}
|
|
|
|
# ============================================
|
|
# Validation
|
|
# ============================================
|
|
|
|
function config::validate() {
|
|
if [[ ! -f "$WG_SERVER_PUBLIC_KEY_FILE" ]]; then
|
|
log::error "Server public key not found: ${WG_SERVER_PUBLIC_KEY_FILE}"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ ! -f "$WG_SERVER_PRIVATE_KEY_FILE" ]]; then
|
|
log::error "Server private key not found: ${WG_SERVER_PRIVATE_KEY_FILE}"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ ! -f "$WG_CONFIG" ]]; then
|
|
log::error "WireGuard config not found: ${WG_CONFIG}"
|
|
exit 1
|
|
fi
|
|
}
|