101 lines
3.9 KiB
Plaintext
101 lines
3.9 KiB
Plaintext
|
#!/bin/bash
|
||
|
|
# FILE: wgapi:back/api/dashboard/add
|
||
|
|
# DESCRIPTION: Add a new peer
|
||
|
|
# USAGE: add ip querystring
|
||
|
|
# ERRORS:
|
||
|
|
# 3: bad args/usage
|
||
|
|
# 4: vars file not found
|
||
|
|
# 5: Wireguard not installed
|
||
|
|
# 6: Hostname in use
|
||
|
|
# 7: Hostname too short
|
||
|
|
# 8: Invalid token
|
||
|
|
# 9: Token file not found
|
||
|
|
# 10: Failed to get peer data from wg
|
||
|
|
# 11: Failed to create new IPs
|
||
|
|
# 12: Servers file doesn't exist
|
||
|
|
# 15: Failed to add user to local wireguard
|
||
|
|
# 16: Failed to add user to federated server
|
||
|
|
|
||
|
|
CONFIG_FILE='/etc/wgapi/config'
|
||
|
|
SERVERS_FILE='/etc/wgapi/servers'
|
||
|
|
[ ${#} -eq 2 ] || exit 3
|
||
|
|
[ -f "${CONFIG_FILE}" ] || exit 4
|
||
|
|
[ -f "${TOKENS_FILE}" ] || exit 9
|
||
|
|
[ -f "${SERVERS_FILE}" ] || exit 12
|
||
|
|
source "${CONFIG_FILE}"
|
||
|
|
|
||
|
|
# Check hostname
|
||
|
|
hostname="$(printf ${2}\n | jq -r '.name' | xargs | tr -dc '[a-z0-9]' | head -c10)"
|
||
|
|
[[ ${#hostname} -ge 3 ]] || (
|
||
|
|
printf 'Hostname too short\n' | res 400
|
||
|
|
exit 7
|
||
|
|
)
|
||
|
|
|
||
|
|
username="$(${LIB_DIR}/ns_lookup_rdns ${REMOTE_ADDR} | cut -d'.' -f2)"
|
||
|
|
[ $? -ne 0 ] && (
|
||
|
|
printf 'User not found' | "${LIB)DIR}/http_res" 403
|
||
|
|
exit 403
|
||
|
|
) ||
|
||
|
|
|
||
|
|
# Check token
|
||
|
|
token_fail(){ printf 'Invalid token\n' | res 403; exit 8; }
|
||
|
|
saved_token=$(grep "${1}" "${TOKENS_FILE}" | cut -f2)
|
||
|
|
[ "${saved_token}" == "" ] && token_fail
|
||
|
|
printf "${username}" | grep "t=${saved_token}" || token_fail
|
||
|
|
|
||
|
|
# Check if new peer already exists
|
||
|
|
printf "${hostnames}" | grep "${hostname}" && (
|
||
|
|
printf "Hostname ${hostname} already exists!\n" | res 40
|
||
|
|
exit 6
|
||
|
|
)
|
||
|
|
|
||
|
|
# Collect/parse existing peer data
|
||
|
|
# Create new IPs and domain
|
||
|
|
peers="$(sudo ${LIB_DIR}/wg_peer_list ${1} tsv)"
|
||
|
|
[ ${?} -ne 0 ] && exit 10
|
||
|
|
hostnames="$(printf "${peers}" | awk '{print $0}' | cut -d'.' -f1)"
|
||
|
|
ipv4s="$(printf "${peers}" | awk '{print $1}')"
|
||
|
|
ipv6s="$(printf "${peers}" | awk '{print $2}')"
|
||
|
|
usernumber="$(printf ${ipv4s} head -n1 | cut -d'.' -f3)"
|
||
|
|
used_ips="$(printf ${ipv4s} | cut -d'.' -f3)\n$(printf ${ipv6s} | cut -d'.' -f3)"
|
||
|
|
used_hostnumbers="$(printf ${used_ipvs} | sort | uniq)"
|
||
|
|
hostnumber=1
|
||
|
|
while printf "${used_hostnumbers}" | grep "${hostnumber}"
|
||
|
|
do hostnumber++
|
||
|
|
done
|
||
|
|
ipv4="${IPV4_NET%.*.*}.${usernumber}.${hostnumber}"
|
||
|
|
ipv6="${IPV6_NET%:*:*}:${usernumber}:${hostnumber}"
|
||
|
|
domain="${hostname}.${username}.${TLD}"
|
||
|
|
# TODO: Check it or exit 11
|
||
|
|
|
||
|
|
# Create wg config
|
||
|
|
#TODO Check for /usr/bin/wg binary
|
||
|
|
privkey="$(/usr/bin/wg genkey)"
|
||
|
|
pubkey="$(echo $privkey | /usr/bin/wg pubkey)"
|
||
|
|
address="${ipv4}/${IPV4_NET##*/},${ipv6}/${IPV6_NET##*/}"
|
||
|
|
server_blocks=''
|
||
|
|
while read server_hostname server_ipv4 server_ipv6 server_pubkey server_endpoint server_admin server_secret; do
|
||
|
|
server_psk="$(/usr/bin/wg genpsk)"
|
||
|
|
server_blocks="${server_blocks}\n[Peer] # ${server_hostname}.${TLD}\nPublicKey=${server_pubkey}\nPresharedKey=${server_psk}\nAllowedIPs=${server_ipv4}/32,${server_ipv6}/128\nEndpoint=${server_endpoint}\n"
|
||
|
|
if [ "${server_hostname}" == "${LOCAL_SERVER}" ]
|
||
|
|
# Add new user to local server
|
||
|
|
then "${LIB_DIR}/wg_peer_add" "${pubkey}" "${server_psk}" "${ipv4}/32,${ipv6}/128"
|
||
|
|
[ ${?} -ne 0 ] && printf 'Failed to add new peer ${ipv4} to local server!' >&2 # TODO: clear existing progress and exit 15
|
||
|
|
# Send new user config to federated server
|
||
|
|
else "${LIB_DIR}/fed_add" "${server_admin}" "${pubkey}" "${server_psk}" "${ipv4}/32,${ipv6}/128" "${server_secret}"
|
||
|
|
[ ${?} -ne 0 ] && printf 'Failed to add new peer ${ipv4} to federated server ${server_hostname}!' >&2 # TODO: clear existing progress and exit 16
|
||
|
|
fi
|
||
|
|
done <${SERVERS_FILE}
|
||
|
|
wg_config="[Interface] # ${hostname}.${username}.${TLD}\nPrivateKey=${privkey}\nAddress=${address}\n${WG_DNS}\n${server_blocks}"
|
||
|
|
|
||
|
|
# Respond to user
|
||
|
|
printf "${wg_config}" | "${LIB_DIR}/http_res"
|
||
|
|
|
||
|
|
# Update nameserver
|
||
|
|
"${LIB_DIR}/ns_update_add" "${domain}" "${ipv4}" "${ipv6}"
|
||
|
|
[ ${?} -ne 0 ] && printf "Failed to add ${domain} ${ipv4} ${ipv6} to DNS server!" >&2
|
||
|
|
|
||
|
|
# Create SSL cert
|
||
|
|
sudo "${LIB_DIR}/ssl_peer_add" "${hostname}" "${username}" "IP:${ipv4},IP:${ipv6}"
|
||
|
|
[ ${?} -ne 0 ] && printf "Failed to add ${domain} ${ipv4} ${ipv6} to DNS server!" >&2
|