@ -29,60 +29,60 @@ const {
module . exports = class WireGuard {
async __ buildConfig ( ) {
this . __ configPromise = Promise . resolve ( ) . then ( async ( ) => {
if ( ! WG_HOST ) {
throw new Error ( 'WG_HOST Environment Variable Not Set!' ) ;
}
debug ( 'Loading configuration...' ) ;
let config ;
try {
config = await fs . readFile ( path . join ( WG_PATH , 'wg0.json' ) , 'utf8' ) ;
config = JSON . parse ( config ) ;
debug ( 'Configuration loaded.' ) ;
} catch ( err ) {
const privateKey = await Util . exec ( 'wg genkey' ) ;
const publicKey = await Util . exec ( ` echo ${ privateKey } | wg pubkey ` , {
log : 'echo ***hidden*** | wg pubkey' ,
} ) ;
const address = WG_DEFAULT_ADDRESS . replace ( 'x' , '1' ) ;
config = {
server : {
privateKey ,
publicKey ,
address ,
} ,
clients : { } ,
} ;
debug ( 'Configuration generated.' ) ;
}
return config ;
} ) ;
return this . __ configPromise ;
}
async getConfig ( ) {
if ( ! this . __ configPromise ) {
this . __ configPromise = Promise . resolve ( ) . then ( async ( ) => {
if ( ! WG_HOST ) {
throw new Error ( 'WG_HOST Environment Variable Not Set!' ) ;
}
const config = await this . __ buildConfig ( ) ;
debug ( 'Loading configuration...' ) ;
let config ;
try {
config = await fs . readFile ( path . join ( WG_PATH , 'wg0.json' ) , 'utf8' ) ;
config = JSON . parse ( config ) ;
debug ( 'Configuration loaded.' ) ;
} catch ( err ) {
const privateKey = await Util . exec ( 'wg genkey' ) ;
const publicKey = await Util . exec ( ` echo ${ privateKey } | wg pubkey ` , {
log : 'echo ***hidden*** | wg pubkey' ,
} ) ;
const address = WG_DEFAULT_ADDRESS . replace ( 'x' , '1' ) ;
const address6 = WG_DEFAULT_ADDRESS6 . replace ( 'x' , '1' ) ;
config = {
server : {
privateKey ,
publicKey ,
address ,
address6 ,
} ,
clients : { } ,
} ;
debug ( 'Configuration generated.' ) ;
await this . __ saveConfig ( config ) ;
await Util . exec ( 'wg-quick down wg0' ) . catch ( ( ) => { } ) ;
await Util . exec ( 'wg-quick up wg0' ) . catch ( ( err ) => {
if ( err && err . message && err . message . includes ( 'Cannot find device "wg0"' ) ) {
throw new Error ( 'WireGuard exited with the error: Cannot find device "wg0"\nThis usually means that your host\'s kernel does not support WireGuard!' ) ;
}
await this . __ saveConfig ( config ) ;
await Util . exec ( 'wg-quick down wg0' ) . catch ( ( ) => { } ) ;
await Util . exec ( 'wg-quick up wg0' ) . catch ( ( err ) => {
if ( err && err . message && err . message . includes ( 'Cannot find device "wg0"' ) ) {
throw new Error ( 'WireGuard exited with the error: Cannot find device "wg0"\nThis usually means that your host\'s kernel does not support WireGuard!' ) ;
}
throw err ;
} ) ;
// await Util.exec(`iptables -t nat -A POSTROUTING -s ${WG_DEFAULT_ADDRESS.replace('x', '0')}/24 -o ' + WG_DEVICE + ' -j MASQUERADE`);
// await Util.exec('iptables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT');
// await Util.exec('iptables -A FORWARD -i wg0 -j ACCEPT');
// await Util.exec('iptables -A FORWARD -o wg0 -j ACCEPT');
// await Util.exec(`ip6tables -t nat -A POSTROUTING -s ${WG_DEFAULT_ADDRESS6.replace('x', '')}/120 -o eth0 -j MASQUERADE`);
// await Util.exec('ip6tables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT');
// await Util.exec('ip6tables -A FORWARD -i wg0 -j ACCEPT');
// await Util.exec('ip6tables -A FORWARD -o wg0 -j ACCEPT');
await this . __ syncConfig ( ) ;
return config ;
throw err ;
} ) ;
// await Util.exec(`iptables -t nat -A POSTROUTING -s ${WG_DEFAULT_ADDRESS.replace('x', '0')}/24 -o ' + WG_DEVICE + ' -j MASQUERADE`);
// await Util.exec('iptables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT');
// await Util.exec('iptables -A FORWARD -i wg0 -j ACCEPT');
// await Util.exec('iptables -A FORWARD -o wg0 -j ACCEPT');
await this . __ syncConfig ( ) ;
}
return this . __ configPromise ;
@ -237,7 +237,9 @@ Endpoint = ${WG_HOST}:${WG_CONFIG_PORT}`;
const config = await this . getConfig ( ) ;
const privateKey = await Util . exec ( 'wg genkey' ) ;
const publicKey = await Util . exec ( ` echo ${ privateKey } | wg pubkey ` ) ;
const publicKey = await Util . exec ( ` echo ${ privateKey } | wg pubkey ` , {
log : 'echo ***hidden*** | wg pubkey' ,
} ) ;
const preSharedKey = await Util . exec ( 'wg genpsk' ) ;
// Calculate next IP
@ -346,22 +348,30 @@ Endpoint = ${WG_HOST}:${WG_CONFIG_PORT}`;
await this . saveConfig ( ) ;
}
async updateClientAddress6 ( { clientId , address6 } ) {
const client = await this . getClient ( { clientId } ) ;
if ( ! Util . isValidIPv6 ( address6 ) ) {
throw new ServerError ( ` Invalid Address6: ${ address6 } ` , 400 ) ;
}
async __ reloadConfig ( ) {
await this . __ buildConfig ( ) ;
await this . __ syncConfig ( ) ;
}
client . address6 = address6 ;
client . updatedAt = new Date ( ) ;
async restoreConfiguration ( config ) {
debug ( 'Starting configuration restore process.' ) ;
const _ config = JSON . parse ( config ) ;
await this . __ saveConfig ( _ config ) ;
await this . __ reloadConfig ( ) ;
debug ( 'Configuration restore process completed.' ) ;
}
await this . saveConfig ( ) ;
async backupConfiguration ( ) {
debug ( 'Starting configuration backup.' ) ;
const config = await this . getConfig ( ) ;
const backup = JSON . stringify ( config , null , 2 ) ;
debug ( 'Configuration backup completed.' ) ;
return backup ;
}
// Shutdown wireguard
async Shutdown ( ) {
await Util . exec ( 'wg-quick down wg0' ) . catch ( ( ) => { } ) ;
await Util . exec ( 'wg-quick down wg0' ) . catch ( ( ) => { } ) ;
}
} ;
Philip H
2 years ago
GitHub
