friwall/web/ipsets.py

import json

import flask
import flask_login

from . import db
from . import system

blueprint = flask.Blueprint('ipsets', __name__)

@blueprint.route('/', methods=('GET', 'POST'))
@flask_login.login_required
def index():
    if not flask_login.current_user.is_admin:
        return flask.Response('forbidden', status=403, mimetype='text/plain')

    with db.locked():
        if flask.request.method == 'POST':
            # read network data from NetBox, merge in custom definitions and dump the lot
            ipsets = db.read('networks')
            formdata = zip(*(flask.request.form.getlist(e) for e in ('name', 'ip', 'ip6', 'nat', 'vpn')))
            for name, ip, ip6, nat, vpn in formdata:
                # drop sets with empty names
                if not name:
                    continue
                # assign IPs for custom networks only
                if name not in ipsets:
                    ipsets[name] = { 'ip': ip.split(), 'ip6': ip6.split() }
                # assign NAT and VPN for all networks
                ipsets[name] |= { 'nat': nat, 'vpn': vpn }
            db.write('ipsets', ipsets)
            system.run(system.save_config)
            return flask.redirect(flask.url_for('ipsets.index'))

        # read network data from NetBox and merge in custom definitions
        ipsets = db.read('networks')
        for name, data in db.read('ipsets').items():
            # keep static IPs if there are any, otherwise set custom flag for this set
            ipsets[name] = data | ipsets.get(name, {'custom': True})

        return flask.render_template('ipsets/index.html', ipsets=ipsets)