wg-easy

Commit Graph

Author	SHA1	Message	Date
Ian Foster	015128af7e	recreate sql migrations and rebase	5 months ago
Ian Foster	dab3c6c7a0	fix typescript errors	5 months ago
Ian Foster	d458919508	fix auto-import	5 months ago
Ian Foster	ed3cf89dad	added comments to firewall rules and updated tests	5 months ago
Ian Foster	146c21d639	Fix firewall IPv6 validation and test expectations Updated validation to correctly handle plain and bracketed IPv6 addresses, and fixed test to expect string from schema instead of object.	5 months ago
Bernd Storath	327d28945d	add tests	5 months ago
Ian Foster	4b9422353c	cleanup more imports	6 months ago
Ian Foster	fdb01e39ba	add note on firewall being experimental and how to opt a single client out of the firewall.	6 months ago
Ian Foster	2df1f38b1a	Document all allowed IP/cidr/port/proto combinations that are allowed and check on save	6 months ago
Ian Foster	2f7f4003e8	remove extra import	6 months ago
Ian Foster	a62b8da57b	fix imports	6 months ago
Ian Foster	c3caacad63	updated firewall docs	6 months ago
Ian Foster	a9264b94e1	check for iptables before enabling the firewall and inform the user if it is missing	6 months ago
Ian Foster	080ee8a203	validate firewall IPs	6 months ago
Ian Foster	d91ab10374	added Comprehensive documentation in README and docs/ for firewall filtering	6 months ago
Ian Foster	09df646d64	Add per-client firewall filtering Implement server-side firewall rules to restrict client network access, allowing administrators to enforce security policies that cannot be bypassed by clients modifying their local configuration. This feature addresses the limitation where "Allowed IPs" only controls client-side routing but doesn't prevent clients from accessing networks they shouldn't reach. The firewall rules are enforced on the server using iptables/ip6tables and provide true access control. Features: - Opt-in via "Enable Per-Client Firewall" toggle in admin interface - Per-client "Firewall Allowed IPs" field for granular control - Support for IPs, CIDRs, and port-based filtering - Protocol specification: TCP, UDP, or both (default) - IPv4 and IPv6 dual-stack support - Falls back to client's allowedIps when firewallIps is empty - Clean separation of routing (allowedIps) from security (firewallIps) Supported formats: - 10.10.0.3 (single IP) - 10.10.0.0/24 (CIDR range) - 192.168.1.5:443 (IP with port, both TCP+UDP) - 192.168.1.5:443/tcp (IP with specific protocol) - [2001:db8::1]:443 (IPv6 with port) Implementation: - New database columns: firewall_enabled (interfaces), firewall_ips (clients) - Migration 0003_add_firewall_filtering for schema updates - firewall.ts utility for iptables chain management (WG_CLIENTS chain) - Integration into WireGuard.ts for automatic rule application - UI components with conditional rendering based on firewall toggle Technical details: - Uses custom WG_CLIENTS iptables chain for isolation - Rebuild strategy: flush and recreate all rules on config save - Mutex protection via rebuildInProgress/rebuildQueued flags - Graceful cleanup when firewall is disabled - No new dependencies (uses existing is-ip, is-cidr packages)	6 months ago
CthulhuVRN	a469ac6897	AmneziaWG 2.0: support for H1-H4 ranges (#2480 ) * AmneziaWG 2.0: support for H1-H4 ranges ## Changes: ``` - [+] Added support for H1-H4 ranges - [!] Fixed interface fields order (H1-H4 goes before I1-I5) ``` ## Known issues: ``` - [!] no check for unique/overlap of H1-H4 values on settings apply: settings will be applied but wg interface will crash with "Invalid argument" error ``` * AmneziaWG 2.0: support for H1-H4 ranges ## Changes: ``` - [+] Added support for H1-H4 ranges - [!] Fixed interface fields order (H1-H4 goes before I1-I5) ``` ## Known issues: ``` - [!] no check for unique/overlap of H1-H4 values on settings apply: settings will be applied but wg interface will crash with "Invalid argument" error ``` * AmneziaWG 2.0: support for H1-H4 ranges ## Changes: ``` - [+] Added support for H1-H4 ranges - [!] Fixed interface fields order (H1-H4 goes before I1-I5) ``` ## Known issues: ``` - [!] no check for unique/overlap of H1-H4 values on settings apply: settings will be applied but wg interface will crash with "Invalid argument" error ``` * Update types.ts Lint fixes --------- Co-authored-by: CthulhuVRN <[email protected]>	5 months ago
Bernd Storath	1178d23659	update packages	5 months ago
Bernd Storath	b3cc1ce839	reduce container size from around 700mb to 400mb	5 months ago
Bernd Storath	71aaec93ef	add unit tests this adds the groundwork to start unit testing some modules	5 months ago
HackingAll	7a219b73d4	Adding galician (#2473 ) * Adding galego -> gl.json * Update i18n.config.ts * Update nuxt.config.ts	5 months ago
Bare7a	c456c5e7dd	Add Bulgarian translation (#2466 )	5 months ago
Bernd Storath	a5880cc0b8	update packages	5 months ago
Bernd Storath	5fca628ebd	change date in copyright footer	5 months ago
Bernd Storath	7ab297c366	Bump version to 15.2.2	5 months ago
Bernd Storath	c5de8f0f44	cli: reset 2fa on admin reset (#2461 ) reset 2fa on cli reset	5 months ago
Bernd Storath	c0641889cf	replace watchtower (#2456 ) update to maintained fork	5 months ago
Bernd Storath	9141562f91	update tagging convention for latest tag	5 months ago
thebigpotatoe	d21af70df1	fix: correct help text for prometheus metrics (#2453 )	5 months ago
Bernd Storath	56ee86cc1c	update packages	5 months ago
Runar Ingebrigtsen	f017b4968c	Add Norwegian bokmål translation (#2447 ) * add Norwegian bokmål translation Signed-off-by: Runar Ingebrigtsen <[email protected]> * add nb config, available in UI Signed-off-by: Runar Ingebrigtsen <[email protected]> --------- Signed-off-by: Runar Ingebrigtsen <[email protected]>	5 months ago
Alexander Chepurnoy	6004457666	feat: update client and server interface parameters (#2440 )	6 months ago
Bernd Storath	1a5a0180ea	Fix LangSelector and ClientCard z-index (#2434 ) fix client card	6 months ago
Ayush Chothe	c732f149e6	feat: Add `wireguard-go` package in `Dockerfile` (#2419 ) * feat: Add `wireguard-go` package in `Dockerfile` * feat: add amneziawg-go Co-authored-by: cany748 <[email protected]>	6 months ago
Bernd Storath	4819480eb0	update packages	6 months ago
Alexander Chepurnoy	fc7ab0dc21	feat(docs): edit amnezia.md (#2430 ) * feat(docs): edit amnezia.md * Update docs/content/advanced/config/amnezia.md Co-authored-by: Copilot <[email protected]> * Update docs/content/advanced/config/amnezia.md Co-authored-by: Copilot <[email protected]> --------- Co-authored-by: Copilot <[email protected]>	6 months ago
Bernd Storath	eb6b96c0f1	lang: Add dutch language (#2413 ) add dutch language Co-authored-by: Stephan Paternotte <[email protected]>	6 months ago
Bernd Storath	f62fad9c40	update packages	6 months ago
Maksim M.	e9a472c8f7	fix(i18n/ru): use "мусор" for AmneziaWG junk packets (#2402 ) The RU translation changed "junk" from "мусорный" to "шумовой". Amnezia authors consistently describe these packets/bytes as "мусор" in their docs and Habr posts. Align wording with upstream terminology to avoid confusion for RU users.	6 months ago
Bernd Storath	552e2b8cbf	update screenshot	6 months ago
Bernd Storath	a0b4192cbd	Bump version to 15.2.1	6 months ago
Bernd Storath	32a055093a	exclude i18n from setup middleware	6 months ago
Bernd Storath	51558c7027	refactor: session handling (#2398 ) * refactor session handling * simplify	6 months ago
binnichtaktiv	b85286f0ab	Lang(de): Improve and add missing translations (#2393 ) * add missing german translations * fix typos and improve existing translations * fix punctuation * fix last overlooked typos	6 months ago
Bernd Storath	48f3fbd715	always generate awg h1-h5	6 months ago
Bernd Storath	458f66818a	fix search magnifying icon	6 months ago
Bernd Storath	7964dc7993	Bump version to 15.2.0	6 months ago
RaffaelHold	0ac5d7d461	feat(docs): Extend docs for routed setup with nftables (#2380 ) * Extend docs for routed setup with nftables When using nftables in a routed setup different up and down hooks need to be used. To limit interaction with docker managed chains a custom WG_EASY chain is added as a jump target. Since nft only supports deletion via handles awk is needed to get the handle of the jump rule for deletion * Remove link to podman-nft * Fix formatting according to prettier rules * Add additional whitespace	6 months ago
Bernd Storath	826914a4f3	update packages	6 months ago
Bernd Storath	261da431e7	Fix: reset onetimelink expiration instead of failing (#2370 ) * update expiresAt instead of failing * add changelog	7 months ago

1 2 3 4 5 ...

1364 Commits (015128af7edb595db2d1ec8fa239025e31189c1a) All Branches Search

1364 Commits (015128af7edb595db2d1ec8fa239025e31189c1a)

All Branches