Add firewall rules logic for all hosts
This commit is contained in:
@@ -14,6 +14,7 @@ import manageWireguardHost from "./manage-wireguard-host";
|
||||
import grabHostDirnames from "./grab-host-dir-names";
|
||||
import grabClientDirnames from "./grab-client-dir-names";
|
||||
import buildHostIptablesScripts from "./build-host-iptables-scripts";
|
||||
import allowSubnetFirewallRules from "../firewall/allow-subnet-firewall-rules";
|
||||
import { AppData } from "@/src/data/app-data";
|
||||
|
||||
const { WIREGUARD_PRIVATE_KEY_FILE_NAME, WIREGUARD_PUBLIC_KEY_FILE_NAME } =
|
||||
@@ -267,9 +268,20 @@ export default async function setupWireguardHost({
|
||||
};
|
||||
}
|
||||
|
||||
const firewall_res = await allowSubnetFirewallRules({
|
||||
subnet: HOST_SUBNET,
|
||||
listen_port: host?.listen_port || AppData["DefaultWGListenPort"],
|
||||
});
|
||||
|
||||
if (!firewall_res.success) {
|
||||
console.log(
|
||||
`Warning setting up firewall rules for host ${HOST_ID} => ${firewall_res.msg}`,
|
||||
);
|
||||
}
|
||||
|
||||
return {
|
||||
success: true,
|
||||
msg: [exec.trim(), manage_res.msg].join("\n\n"),
|
||||
msg: [exec.trim(), manage_res.msg, firewall_res.msg].join("\n\n"),
|
||||
};
|
||||
} catch (error: any) {
|
||||
console.log(
|
||||
|
||||
Reference in New Issue
Block a user