bundles/wireguard: add netdev and network files, add iptables rules

2020-11-21 15:38:38 +01:00 · 2020-11-21 15:38:38 +01:00 · 58ca3fa9ae
commit 58ca3fa9ae
parent e2490df48e
8 changed files with 168 additions and 8 deletions
--- a/bundles/wireguard/files/wg0.netdev
+++ b/bundles/wireguard/files/wg0.netdev
@ -0,0 +1,24 @@
+[NetDev]
+Name=wg0
+Kind=wireguard
+Description=WireGuard server
+
+[WireGuard]
+PrivateKey=${privatekey}
+ListenPort=51820
+
+% for peer, config in sorted(peers.items()):
+# Peer ${peer}
+[WireGuardPeer]
+PublicKey=${config['pubkey']}
+%   if len(peers) == 1: # FIXME
+AllowedIPs=${network}
+%   else:
+AllowedIPs=${','.join(sorted(config['ips']))}
+%   endif
+PresharedKey=${config['psk']}
+%   if 'endpoint' in config:
+Endpoint=${config['endpoint']}
+%   endif
+
+% endfor