frodovdr/raspap-webgui
1
0
Fork 0
mirror of https://github.com/billz/raspap-webgui.git synced 2023-10-10 13:37:24 +02:00
Code Issues Releases Wiki Activity

Save wg config, template fixes

Browse Source
This commit is contained in:
billz 2020-08-28 23:42:55 +01:00
parent 34b5b4c1b2
commit af0721e021
2 changed files with 49 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
includes/wireguard.php
View File

@ -10,53 +10,74 @@ function DisplayWireGuardConfig()
{ {
$status = new StatusMessages(); $status = new StatusMessages();
if (!RASPI_MONITOR_ENABLED) { if (!RASPI_MONITOR_ENABLED) {
if (isset($_POST['savewgettings'])) { if (isset($_POST['savewgsettings'])) {
// Validate input // Set defaults
$good_input = true; $good_input = true;
$peer_id = 1; $peer_id = 1;
if (isset($_POST['peer_id'])) { // Validate input
$peer_id = escapeshellarg($_POST['peer_id']); if (isset($_POST['wg_port'])) {
if (strlen($_POST['wg_port']) > 5 || !is_numeric($_POST['wg_port'])) {
$status->addMessage('Invalid value for port number', 'danger');
$good_input = false;
} }
if (isset($_POST['wg_endpoint'])) { }
if (!filter_var($_POST['wg_endpoint'], FILTER_VALIDATE_IP)) { if (isset($_POST['wg_ipaddress'])) {
if (!validateCidr($_POST['wg_ipaddress'])) {
$status->addMessage('Invalid value for IP address', 'danger');
$good_input = false;
}
}
if (isset($_POST['wg_endpoint']) && strlen(trim($_POST['wg_endpoint']) >0 )) {
if (!validateCidr($_POST['wg_endpoint'])) {
$status->addMessage('Invalid value for endpoint address', 'danger'); $status->addMessage('Invalid value for endpoint address', 'danger');
$good_input = false; $good_input = false;
} else {
$wg_endpoint = escapeshellarg($_POST['wg_endpoint']);
} }
} }
if (isset($_POST['wg_allowedips'])) { if (isset($_POST['wg_allowedips'])) {
if (!filter_var($_POST['wg_allowedips'], FILTER_VALIDATE_IP)) { if (!validateCidr($_POST['wg_allowedips'])) {
$status->addMessage('Invalid value for allowed IPs', 'danger'); $status->addMessage('Invalid value for allowed IPs', 'danger');
$good_input = false; $good_input = false;
} else {
$wg_allowedips = escapeshellarg($_POST['wg_allowedips']);
} }
} }
if (isset($_POST['wg_pkeepalive'])) { if (isset($_POST['wg_pkeepalive']) && strlen(trim($_POST['wg_pkeepalive']) >0 )) {
if (strlen($_POST['wg_pkeepalive']) > 4 || !is_numeric($_POST['wg_pkeepalive'])) { if (strlen($_POST['wg_pkeepalive']) > 4 || !is_numeric($_POST['wg_pkeepalive'])) {
$status->addMessage('Invalid value for persistent keepalive', 'danger'); $status->addMessage('Invalid value for persistent keepalive', 'danger');
$good_input = false; $good_input = false;
} else {
$wg_pkeepalive = escapeshellarg($_POST['wg_pkeepalive']);
} }
} }
if (isset($_POST['wg_peerpubkey'])) {
$wg_endpoint = strip_tags(trim($_POST['wg_peerpubkey']));
}
// Save settings // Save settings
if ($good_input) { if ($good_input) {
$config[] = '[Interface]';
$config[] = 'Address = '.$_POST['wg_ipaddress'];
$config[] = 'ListenPort = '.$_POST['wg_port'];
$config[] = '';
$config[] = 'PrivateKey = '.$_POST['wg_privkey'];
$config[] = 'PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE';
$config[] = 'PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE';
$config[] = '';
$config[] = '[Peer]';
$config[] = 'PublicKey = '.$_POST['wg_pubkey'];
if ($_POST['wg_endpoint'] !== '') {
$config[] = 'Endpoint = '.trim($_POST['wg_endpoint']);
}
$config[] = 'AllowedIPs = '.$_POST['wg_allowedips'];
if ($_POST['wg_pkeepalive'] !== '') {
$config[] = 'PersistentKeepalive = '.trim($_POST['wg_pkeepalive']);
}
$config[] = '';
$config = join(PHP_EOL, $config);
file_put_contents("/tmp/wgdata", $config); file_put_contents("/tmp/wgdata", $config);
system('sudo cp /tmp/wgdata '.RASPI_WIREGUARD_CONFIG, $return); system('sudo cp /tmp/wgdata '.RASPI_WIREGUARD_CONFIG, $return);
foreach ($return as $line) { foreach ($return as $line) {
$status->addMessage($line, 'info'); $status->addMessage($line, 'info');
} }
}
if ($return == 0) { if ($return == 0) {
$status->addMessage('Wireguard configuration updated successfully', 'success'); $status->addMessage('Wireguard configuration updated successfully', 'success');
} else { } else {
$status->addMessage('Wireguard configuration failed to be updated.', 'danger'); $status->addMessage('Wireguard configuration failed to be updated.', 'danger');
} }
}
} elseif (isset($_POST['startwg'])) { } elseif (isset($_POST['startwg'])) {
$status->addMessage('Attempting to start WireGuard', 'info'); $status->addMessage('Attempting to start WireGuard', 'info');
@ -79,6 +100,7 @@ function DisplayWireGuardConfig()
$wg_port = $conf['ListenPort']; $wg_port = $conf['ListenPort'];
$wg_ipaddress = $conf['Address']; $wg_ipaddress = $conf['Address'];
$wg_pubkey = $conf['PublicKey']; $wg_pubkey = $conf['PublicKey'];
$wg_privkey = $conf['PrivateKey'];
$wg_endpoint = $conf['Endpoint']; $wg_endpoint = $conf['Endpoint'];
$wg_allowedips = $conf['AllowedIPs']; $wg_allowedips = $conf['AllowedIPs'];
$wg_pkeepalive = $conf['PersistentKeepalive']; $wg_pkeepalive = $conf['PersistentKeepalive'];
@ -98,6 +120,7 @@ function DisplayWireGuardConfig()
"wg_port", "wg_port",
"wg_ipaddress", "wg_ipaddress",
"wg_pubkey", "wg_pubkey",
"wg_privkey",
"wg_endpoint", "wg_endpoint",
"wg_allowedips", "wg_allowedips",
"wg_pkeepalive" "wg_pkeepalive"

7
templates/wg/general.php
View File

@ -16,7 +16,7 @@
<div class="row"> <div class="row">
<div class="form-group col-xs-3 col-sm-3"> <div class="form-group col-xs-3 col-sm-3">
<label for="code"><?php echo _("Local Port"); ?></label> <label for="code"><?php echo _("Local Port"); ?></label>
<input type="text" class="form-control" name="wgport" placeholder="51820" value="<?php echo htmlspecialchars($wg_port, ENT_QUOTES); ?>" /> <input type="text" class="form-control" name="wg_port" value="<?php echo htmlspecialchars($wg_port, ENT_QUOTES); ?>" />
</div> </div>
</div> </div>
@ -25,13 +25,14 @@
<label for="code"><?php echo _("Local public key"); ?></label> <label for="code"><?php echo _("Local public key"); ?></label>
</div> </div>
<div class="input-group col-md-12 mb-3"> <div class="input-group col-md-12 mb-3">
<input type="text" class="form-control" name="wgpubkey" value="<?php echo htmlspecialchars($wg_pubkey, ENT_QUOTES); ?>" /> <input type="text" class="form-control" name="wg_pubkey" value="<?php echo htmlspecialchars($wg_pubkey, ENT_QUOTES); ?>" />
<div class="input-group-append"> <div class="input-group-append">
<button class="btn btn-sm btn-outline-secondary rounded-right" type="button" onclick="updateBlocklist()"><?php echo _("Generate key"); ?></button> <button class="btn btn-sm btn-outline-secondary rounded-right" type="button" onclick="updateWgKey()"><?php echo _("Generate key"); ?></button>
<span id="cbxblocklist-status" class="input-group-addon check-hidden ml-2 mt-1"><i class="fas fa-check"></i></span> <span id="cbxblocklist-status" class="input-group-addon check-hidden ml-2 mt-1"><i class="fas fa-check"></i></span>
</div> </div>
</div> </div>
</div> </div>
<input type="hidden" name="wg_privkey" value="<?php echo htmlspecialchars($wg_privkey, ENT_QUOTES); ?>" />
<div class="row"> <div class="row">
<div class="form-group col-md-6"> <div class="form-group col-md-6">