rc/friwall
2
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Do not allocate wireguard server IP to clients

Browse source 
It’s possible to avoid assigning any IP to the server but let’s not.
This commit is contained in:
Timotej Lazar 2023-02-06 17:02:07 +01:00
parent 42b16c8ac5
commit a791e2bcdd
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
web/vpn.py
View file

@ -39,12 +39,12 @@ def new():
server_pubkey = subprocess.run([f'wg pubkey'], input=settings.get('wg_key'), server_pubkey = subprocess.run([f'wg pubkey'], input=settings.get('wg_key'),
text=True, capture_output=True, shell=True).stdout.strip() text=True, capture_output=True, shell=True).stdout.strip()
host = ipaddress.ip_interface(settings.get('wg_net', '10.0.0.1/24'))
with db.locked('wireguard'): with db.locked('wireguard'):
# Find a free address for the new key. # Find a free address for the new key.
ips = db.read('wireguard') ips = db.read('wireguard')
network = ipaddress.ip_network(settings.get('wg_net', '10.0.0.1/24'), strict=False) for ip in host.network.hosts():
for ip in network.hosts(): if ip != host.ip and str(ip) not in ips:
if str(ip) not in ips:
break break
else: else:
return flask.Response('no more available IP addresses', status=500, mimetype='text/plain') return flask.Response('no more available IP addresses', status=500, mimetype='text/plain')