2021-04-01 14:27:31 +00:00
|
|
|
from ipaddress import ip_network
|
|
|
|
|
2021-04-02 16:57:13 +00:00
|
|
|
repo.libs.tools.require_bundle(node, 'systemd-networkd')
|
2020-11-21 14:38:38 +00:00
|
|
|
|
|
|
|
files = {
|
2021-09-29 17:27:13 +00:00
|
|
|
'/usr/local/share/icinga/plugins/check_wireguard_connected': {
|
|
|
|
'mode': '0755',
|
|
|
|
},
|
|
|
|
}
|
|
|
|
|
2022-03-10 19:36:20 +00:00
|
|
|
deps = set()
|
|
|
|
|
|
|
|
if node.has_bundle('apt'):
|
|
|
|
deps.add('pkg_apt:wireguard')
|
|
|
|
|
2023-09-09 11:54:27 +00:00
|
|
|
for peer, config in sorted(node.metadata.get('wireguard/peers', {}).items()):
|
|
|
|
files[f'/etc/systemd/network/wg_{config["iface"]}.netdev'] = {
|
2020-11-21 14:38:38 +00:00
|
|
|
'content_type': 'mako',
|
2021-09-29 17:27:13 +00:00
|
|
|
'source': 'wg.netdev',
|
2022-05-16 08:48:26 +00:00
|
|
|
'owner': 'systemd-network',
|
|
|
|
'mode': '0600',
|
2021-04-01 14:27:31 +00:00
|
|
|
'context': {
|
2021-09-29 17:27:13 +00:00
|
|
|
'endpoint': config.get('endpoint'),
|
2023-09-09 11:54:27 +00:00
|
|
|
'iface': config['iface'],
|
2021-09-29 17:27:13 +00:00
|
|
|
'peer': peer,
|
|
|
|
'port': config['my_port'],
|
|
|
|
'privatekey': node.metadata.get('wireguard/privatekey'),
|
|
|
|
'psk': config['psk'],
|
|
|
|
'pubkey': config['pubkey'],
|
2023-12-10 13:48:24 +00:00
|
|
|
'specials': repo.libs.s2s.WG_AUTOGEN_SETTINGS.get(peer, {}),
|
2020-11-21 14:38:38 +00:00
|
|
|
},
|
2022-03-10 19:36:20 +00:00
|
|
|
'needs': deps,
|
2020-11-21 14:38:38 +00:00
|
|
|
'triggers': {
|
|
|
|
'svc_systemd:systemd-networkd:restart',
|
|
|
|
},
|
2020-11-27 02:09:37 +00:00
|
|
|
}
|
2021-09-30 04:37:42 +00:00
|
|
|
|
2023-09-11 07:09:09 +00:00
|
|
|
files['/usr/local/bin/wg_health_check'] = {
|
|
|
|
'content_type': 'mako',
|
|
|
|
'context': {
|
|
|
|
'peers': node.metadata.get('wireguard/health_checks'),
|
|
|
|
},
|
|
|
|
'mode': '0755',
|
|
|
|
}
|
2021-10-14 06:52:03 +00:00
|
|
|
|
2021-09-30 04:37:42 +00:00
|
|
|
if node.has_bundle('pppd'):
|
|
|
|
files['/etc/ppp/ip-up.d/reconnect-wireguard'] = {
|
|
|
|
'source': 'pppd-ip-up',
|
|
|
|
'content_type': 'mako',
|
|
|
|
'mode': '0755',
|
|
|
|
}
|