rc/friwall
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Do not allocate wireguard server IP to clients

Browse source 
It’s possible to avoid assigning any IP to the server but let’s not.
This commit is contained in:
Timotej Lazar 2023-02-06 17:02:07 +01:00
parent 42b16c8ac5
commit a791e2bcdd
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
web/vpn.py
View file

@ -39,12 +39,12 @@ def new():
server_pubkey = subprocess.run([f'wg pubkey'], input=settings.get('wg_key'),
text=True, capture_output=True, shell=True).stdout.strip()
host = ipaddress.ip_interface(settings.get('wg_net', '10.0.0.1/24'))
with db.locked('wireguard'):
# Find a free address for the new key.
ips = db.read('wireguard')
network = ipaddress.ip_network(settings.get('wg_net', '10.0.0.1/24'), strict=False)
for ip in network.hosts():
if str(ip) not in ips:
for ip in host.network.hosts():
if ip != host.ip and str(ip) not in ips:
break
else:
return flask.Response('no more available IP addresses', status=500, mimetype='text/plain')