mirror of
https://git.freebsd.org/ports.git
synced 2025-06-20 12:10:31 -04:00
9986bb780c
- Introduce wireguard_confdir to rc.d script - Fix variables and load_rc_config order in rc.d script - Change rc.d scripts to run earlier after NETWORKING is available Submitted by: niels@netbox.org
106 lines
2.6 KiB
Bash
106 lines
2.6 KiB
Bash
#!/bin/sh
|
|
|
|
# PROVIDE: wireguard
|
|
# REQUIRE: NETWORKING
|
|
# KEYWORD: shutdown
|
|
#
|
|
# wireguard_enable (bool): Set to "YES" to enable wireguard.
|
|
# (default: "NO")
|
|
#
|
|
# wireguard_interfaces (str): List of interfaces to bring up/down
|
|
# on start/stop. (eg: "wg0 wg1")
|
|
# (default: "")
|
|
# wireguard_confdir (str): Config directory that contains wg0.conf
|
|
# (default: "%%PREFIX%%/etc/wireguard")
|
|
# wireguard_<iface>_ips (str): List of IP Addresses for iface
|
|
# wireguard_<iface>_routes (str): List of Routes for this iface
|
|
# wireguard_<iface>_mtu (str): MTU for iface (default: "1500")
|
|
|
|
. /etc/rc.subr
|
|
|
|
name=wireguard
|
|
rcvar=wireguard_enable
|
|
extra_commands="reload"
|
|
|
|
start_cmd="${name}_start"
|
|
stop_cmd="${name}_stop"
|
|
reload_cmd="${name}_reload"
|
|
|
|
wireguard_start()
|
|
{
|
|
for interface in ${wireguard_interfaces}; do
|
|
load_rc_config wireguard_${interface}
|
|
|
|
eval wireguard_ips="\${wireguard_${interface}_ips}"
|
|
eval wireguard_routes="\${wireguard_${interface}_routes}"
|
|
eval wireguard_mtu="\${wireguard_${interface}_mtu}"
|
|
|
|
ifconfig ${interface} create
|
|
%%PREFIX%%/bin/wg setconf ${interface} ${wireguard_confdir}/${interface}.conf
|
|
|
|
for ip in ${wireguard_ips}; do
|
|
if [ "${ip#*:}" != "${ip}" ]; then
|
|
ifconfig ${interface} inet6 ${ip} alias
|
|
else
|
|
ifconfig ${interface} inet ${ip} alias
|
|
fi
|
|
done
|
|
|
|
if [ ! -z "${wireguard_mtu}" ]; then
|
|
ifconfig ${interface} mtu ${wireguard_mtu}
|
|
fi
|
|
|
|
ifconfig ${interface} up
|
|
|
|
for route in ${wireguard_routes}; do
|
|
if [ "${route#*:}" != "${route}" ]; then
|
|
route -q -n add -inet6 ${route} -interface ${interface}
|
|
else
|
|
route -q -n add -inet ${route} -interface ${interface}
|
|
fi
|
|
done
|
|
done
|
|
}
|
|
|
|
wireguard_stop()
|
|
{
|
|
for interface in ${wireguard_interfaces}; do
|
|
load_rc_config wireguard_${interface}
|
|
|
|
eval wireguard_routes="\${wireguard_${interface}_routes}"
|
|
|
|
for route in ${wireguard_routes}; do
|
|
if [ "${route#*:}" != "${route}" ]; then
|
|
route -q -n delete -inet6 ${route} -interface ${interface}
|
|
else
|
|
route -q -n delete -inet ${route} -interface ${interface}
|
|
fi
|
|
done
|
|
|
|
ifconfig ${interface} down
|
|
|
|
ifconfig ${interface} destroy
|
|
done
|
|
|
|
if kldstat -q -n if_wg; then
|
|
if ! kldunload if_wg > /dev/null 2>&1; then
|
|
warn "Can't unload if_wg module."
|
|
return 1
|
|
fi
|
|
fi
|
|
}
|
|
|
|
wireguard_reload()
|
|
{
|
|
for interface in ${wireguard_interfaces}; do
|
|
%%PREFIX%%/bin/wg syncconf ${interface} ${wireguard_confdir}/${interface}.conf
|
|
done
|
|
}
|
|
|
|
load_rc_config $name
|
|
|
|
: ${wireguard_enable="NO"}
|
|
: ${wireguard_interfaces=""}
|
|
: ${wireguard_confdir="%%PREFIX%%/etc/wireguard"}
|
|
|
|
run_rc_command "$1"
|