All gists

nuno / firewall.module

0 likes
0 forks
1 files
Last active 3 months ago
1 function firewall::restore_blocks() {
2 local blocks_dir
3 blocks_dir="$(ctx::blocks)"
4
5 # Restore rules from meta files (new system)
6 rule::restore_all
7
8 # Restore per-client full-blocks (wgctl block/unblock system)
9 for block_file in "${blocks_dir}"/*.block; do
10 [[ -f "$block_file" ]] || continue

nuno / gistfile1.txt

0 likes
0 forks
1 files
Last active 3 months ago
1 "function firewall::restore_blocks" /etc/wireguard/wgctl/modules/firewall.module.sh
2 function firewall::restore_blocks() {
3 local blocks_dir
4 blocks_dir="$(ctx::blocks)"
5
6 # Restore guest rules if marker exists
7 local marker="${blocks_dir}/_guest_rules.active"
8 if [[ -f "$marker" ]]; then
9 firewall::apply_guest_rules
10 log::wg "Restored guest firewall rules"

nuno / gistfile1.txt

0 likes
0 forks
1 files
Last active 3 months ago
1 #!/usr/bin/env bash
2
3 # ============================================
4 # Lifecycle
5 # ============================================
6
7 function cmd::add::on_load() {
8 flag::register --name
9 flag::register --type
10 flag::register --subtype

nuno / gistfile1.txt

0 likes
0 forks
1 files
Last active 3 months ago
1 iptables -L FORWARD -n -v
2 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
3 pkts bytes target prot opt in out source destination
4 3066 428K ACCEPT 0 -- wg0 * 0.0.0.0/0 0.0.0.0/0
5 2587 3767K ACCEPT 0 -- * wg0 0.0.0.0/0 0.0.0.0/0
6 0 0 LOG 0 -- * * 10.1.103.2 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
7 0 0 DROP 0 -- * * 10.1.103.2 10.0.0.100
8 0 0 LOG 0 -- * * 10.1.103.2 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
9 0 0 DROP 0 -- * * 10.1.103.2 10.0.0.105
10 0 0 LOG 0 -- * * 10.1.103.2 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "

nuno / gistfile1.txt

0 likes
0 forks
1 files
Last active 3 months ago
1 function cmd::rule::list() {
2 local rules_dir
3 rules_dir="$(ctx::rules)"
4
5 local rules=("${rules_dir}"/*.rule)
6 if [[ ! -f "${rules[0]}" ]]; then
7 log::wg "No rules configured"
8 return 0
9 fi

nuno / gistfile1.txt

0 likes
0 forks
1 files
Last active 3 months ago
1 cat /etc/wireguard/wgctl/commands/rule.command.sh | grep -A 50 "function cmd::rule::list"
2 function cmd::rule::list() {
3 local rules_dir
4 rules_dir="$(ctx::rules)"
5
6 local rules=("${rules_dir}"/*.rule)
7 if [[ ! -f "${rules[0]}" ]]; then
8 log::wg "No rules configured"
9 return 0
10 fi

nuno / add.command.sh

0 likes
0 forks
1 files
Last active 3 months ago
1 function cmd::add::run() {
2 local name=""
3 local type=""
4 local subtype=""
5 local rule=""
6 local ip=""
7 local tunnel=""
8 local guest=false
9 local presets=()
10 local show_config=false

nuno / gistfile1.txt

0 likes
0 forks
1 files
Last active 3 months ago
1 I did, just to confirm, is this the place where you'd put it?
2
3 # Create client config
4 peers::create_client_config "$full_name" "$effective_type" "$ip" "$allowed_ips" || return 1
5
6 # Store subtype in meta
7 if [[ -n "$subtype" ]]; then
8 peers::set_meta "$full_name" "subtype" "$subtype"
9 fi

nuno / add.command.sh

0 likes
0 forks
1 files
Last active 3 months ago
1 #!/usr/bin/env bash
2
3 # ============================================
4 # Lifecycle
5 # ============================================
6
7 function cmd::add::on_load() {
8 flag::register --name
9 flag::register --type
10 flag::register --subtype

nuno / monitor.module.sh

0 likes
0 forks
1 files
Last active 3 months ago
1 #!/usr/bin/env bash
2
3 # ============================================
4 # Config
5 # ============================================
6
7 MONITOR_DIR="$(ctx::root)/daemon"
8 WATCHLIST_FILE="${MONITOR_DIR}/watchlist.json"
9 EVENTS_LOG="${MONITOR_DIR}/events.log"
10 MONITOR_SERVICE="wgctl-monitor"
Newer Older

Powered by Opengist ⋅ Load: 99ms⋅

English
⋅ KrilHub