Archives/wg-netns
2
0
Fork 0
mirror of https://github.com/dadevel/wg-netns synced 2024-10-30 21:20:12 +00:00
Code Issues Projects Releases Wiki Activity

make private key optional

Browse Source 
Allows private keys to be set in a post-up command and left out of config files.
This commit is contained in:
Alex Leigh 2023-03-19 02:06:17 -07:00 committed by Daniel
parent 79c3c81397
commit eff7413c79
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@ -88,6 +88,7 @@ interfaces:
address:
- 10.10.11.172/32
- fc00:dead:beef:1::172/128
# can also be set via "wg set wg-site-a $key"
private-key: nFkQQjN+...
# optional settings
listen-port: 51821

5
wgnetns/main.py
View File

@ -135,7 +135,7 @@ class Peer:
class Interface:
name: str
base_netns: str
private_key: str
private_key: Optional[str] = None
public_key: Optional[str] = None
address: list[str] = dataclasses.field(default_factory=list)
listen_port: int = 0
@ -166,7 +166,8 @@ class Interface:
def _configure_wireguard(self, namespace: Namespace) -> None:
wg('set', self.name, 'listen-port', self.listen_port, netns=namespace.name)
wg('set', self.name, 'fwmark', self.fwmark, netns=namespace.name)
wg('set', self.name, 'private-key', '/dev/stdin', stdin=self.private_key, netns=namespace.name)
if self.private_key:
wg('set', self.name, 'private-key', '/dev/stdin', stdin=self.private_key, netns=namespace.name)
def _assign_addresses(self, namespace: Namespace) -> None:
for address in self.address: