rc/friwall
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

vpn: configure IPv6 addresses for WG clients

Browse source
This commit is contained in:
Timotej Lazar 2023-12-04 10:23:41 +01:00
parent 92e552eb76
commit ff2246df8c
4 changed files with 11 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
web/system.py
View file

@ -102,7 +102,7 @@ def save_config():
wireguard = db.read('wireguard')
for ip, key in wireguard.items():
ip4 = [f'{ip}/32']
ip6 = [f'{key["ip6"]}/128'] if 'ip6' in key else None
ip6 = [f'{key["ip6"]}/128'] if key.get('ip6') else None
for network in user_networks.get(key.get('user', ''), ()):
if group := network_group(network):
ipset_add(ipsets, group, ip4, ip6)
@ -174,6 +174,8 @@ PrivateKey = {settings.get('wg_key')}
PublicKey = {data.get('key')}
AllowedIPs = {ip}
''', file=f)
if 'ip6' in data:
print(f'AllowedIPs = {data["ip6"]}', file=f)
# Make a config archive in a temporary place, so we don’t send
# incomplete tars.