Add firewall rules logic for all hosts

This commit is contained in:
2026-09-27 14:25:27 +01:00
parent bbf29a5c1a
commit dbae73a746
13 changed files with 1115 additions and 15 deletions
@@ -14,6 +14,7 @@ import manageWireguardHost from "./manage-wireguard-host";
import grabHostDirnames from "./grab-host-dir-names";
import grabClientDirnames from "./grab-client-dir-names";
import buildHostIptablesScripts from "./build-host-iptables-scripts";
import allowSubnetFirewallRules from "../firewall/allow-subnet-firewall-rules";
import { AppData } from "@/src/data/app-data";
const { WIREGUARD_PRIVATE_KEY_FILE_NAME, WIREGUARD_PUBLIC_KEY_FILE_NAME } =
@@ -267,9 +268,20 @@ export default async function setupWireguardHost({
};
}
const firewall_res = await allowSubnetFirewallRules({
subnet: HOST_SUBNET,
listen_port: host?.listen_port || AppData["DefaultWGListenPort"],
});
if (!firewall_res.success) {
console.log(
`Warning setting up firewall rules for host ${HOST_ID} => ${firewall_res.msg}`,
);
}
return {
success: true,
msg: [exec.trim(), manage_res.msg].join("\n\n"),
msg: [exec.trim(), manage_res.msg, firewall_res.msg].join("\n\n"),
};
} catch (error: any) {
console.log(