Archives/wg-netns
2
0
Fork 0
mirror of https://github.com/dadevel/wg-netns synced 2024-10-30 21:20:12 +00:00
Code Issues Projects Releases Wiki Activity

make private key optional

Browse Source 
Allows private keys to be set in a post-up command and left out of config files.
This commit is contained in:
Alex Leigh 2023-03-19 02:06:17 -07:00 committed by Daniel
parent 79c3c81397
commit eff7413c79
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@ -88,6 +88,7 @@ interfaces:
address: address:
- 10.10.11.172/32 - 10.10.11.172/32
- fc00:dead:beef:1::172/128 - fc00:dead:beef:1::172/128
# can also be set via "wg set wg-site-a $key"
private-key: nFkQQjN+... private-key: nFkQQjN+...
# optional settings # optional settings
listen-port: 51821 listen-port: 51821

3
wgnetns/main.py
View File

@ -135,7 +135,7 @@ class Peer:
class Interface: class Interface:
name: str name: str
base_netns: str base_netns: str
private_key: str private_key: Optional[str] = None
public_key: Optional[str] = None public_key: Optional[str] = None
address: list[str] = dataclasses.field(default_factory=list) address: list[str] = dataclasses.field(default_factory=list)
listen_port: int = 0 listen_port: int = 0
@ -166,6 +166,7 @@ class Interface:
def _configure_wireguard(self, namespace: Namespace) -> None: def _configure_wireguard(self, namespace: Namespace) -> None:
wg('set', self.name, 'listen-port', self.listen_port, netns=namespace.name) wg('set', self.name, 'listen-port', self.listen_port, netns=namespace.name)
wg('set', self.name, 'fwmark', self.fwmark, netns=namespace.name) wg('set', self.name, 'fwmark', self.fwmark, netns=namespace.name)
if self.private_key:
wg('set', self.name, 'private-key', '/dev/stdin', stdin=self.private_key, netns=namespace.name) wg('set', self.name, 'private-key', '/dev/stdin', stdin=self.private_key, netns=namespace.name)
def _assign_addresses(self, namespace: Namespace) -> None: def _assign_addresses(self, namespace: Namespace) -> None: