mirror of
https://github.com/dadevel/wg-netns
synced 2024-10-30 21:20:12 +00:00
make private key optional
Allows private keys to be set in a post-up command and left out of config files.
This commit is contained in:
parent
79c3c81397
commit
eff7413c79
@ -88,6 +88,7 @@ interfaces:
|
||||
address:
|
||||
- 10.10.11.172/32
|
||||
- fc00:dead:beef:1::172/128
|
||||
# can also be set via "wg set wg-site-a $key"
|
||||
private-key: nFkQQjN+...
|
||||
# optional settings
|
||||
listen-port: 51821
|
||||
|
@ -135,7 +135,7 @@ class Peer:
|
||||
class Interface:
|
||||
name: str
|
||||
base_netns: str
|
||||
private_key: str
|
||||
private_key: Optional[str] = None
|
||||
public_key: Optional[str] = None
|
||||
address: list[str] = dataclasses.field(default_factory=list)
|
||||
listen_port: int = 0
|
||||
@ -166,6 +166,7 @@ class Interface:
|
||||
def _configure_wireguard(self, namespace: Namespace) -> None:
|
||||
wg('set', self.name, 'listen-port', self.listen_port, netns=namespace.name)
|
||||
wg('set', self.name, 'fwmark', self.fwmark, netns=namespace.name)
|
||||
if self.private_key:
|
||||
wg('set', self.name, 'private-key', '/dev/stdin', stdin=self.private_key, netns=namespace.name)
|
||||
|
||||
def _assign_addresses(self, namespace: Namespace) -> None:
|
||||
|
Loading…
Reference in New Issue
Block a user