„wg-config“ hinzufügen
This commit is contained in:
parent
fba3a95c79
commit
5449d19b46
142
wg-config
Normal file
142
wg-config
Normal file
@ -0,0 +1,142 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# This script creates a wireguard configuration for both sides
|
||||||
|
|
||||||
|
prog="$(basename $0)"
|
||||||
|
|
||||||
|
a_privkey=$(wg genkey)
|
||||||
|
a_pubkey=$(echo ${a_privkey} | wg pubkey)
|
||||||
|
a_file=./side-a.conf
|
||||||
|
a_print_qr=0
|
||||||
|
a_print_opn=0
|
||||||
|
|
||||||
|
b_privkey=$(wg genkey)
|
||||||
|
b_pubkey=$(echo ${b_privkey} | wg pubkey)
|
||||||
|
b_file=./side-b.conf
|
||||||
|
b_print_qr=0
|
||||||
|
b_print_opn=0
|
||||||
|
|
||||||
|
port=51820
|
||||||
|
persistent_keepalive=25
|
||||||
|
psk=$(wg genpsk)
|
||||||
|
|
||||||
|
if ! which wg > /dev/null; then
|
||||||
|
echo "Please install wireguard before running this script!"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! which qrencode > /dev/null; then
|
||||||
|
echo "Please install qrencode before running this script!"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat >&2 <<-EOF
|
||||||
|
usage: $prog [-h]
|
||||||
|
creates a wireguard configuration for both endpoints
|
||||||
|
|
||||||
|
-e ENDPOINT_ADDR Endpoint address on side A
|
||||||
|
-t TUNNEL_ADDR Tunnel address on side A
|
||||||
|
-n NETWORKS CIDR formatted networks accessible on side A (comma separated)
|
||||||
|
-d DNS DNS servers and suffixes accessible on side A (comma separated)
|
||||||
|
-f FILENAME Save side A to specified file (default: $a_file)
|
||||||
|
-q Print side A as QR code
|
||||||
|
-o Print side A as OPNsense template
|
||||||
|
|
||||||
|
-E ENDPOINT Endpoint address on side B
|
||||||
|
-T TUNNEL_ADDR Tunnel address on side B
|
||||||
|
-N NETWORKS CIDR formatted networks accessible on side B (comma separated)
|
||||||
|
-D DNS DNS servers and suffixes accessible on side B (comma separated)
|
||||||
|
-F FILENAME Save side B to specified file (default: $b_file)
|
||||||
|
-Q Print side B as QR code
|
||||||
|
-O Print side B as OPNsense template
|
||||||
|
|
||||||
|
-p PORT UDP Port (used on both sides, default: $port)
|
||||||
|
-k KEEPALIVE Override PersistentKeepalive (default: $persistent_keepalive)
|
||||||
|
|
||||||
|
-h displays this help text
|
||||||
|
---------------------------------------------------------------------------
|
||||||
|
(C) 2023 wg-creator by bashclub (https://github.com/bashclub)
|
||||||
|
Author: Thorsten Spille <thorsten@spille-edv.de>
|
||||||
|
---------------------------------------------------------------------------
|
||||||
|
EOF
|
||||||
|
exit $1
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
while getopts "e:t:n:d:f:qoE:T:N:D:F:QOp:k:h" opt; do
|
||||||
|
case $opt in
|
||||||
|
h) usage 0 ;;
|
||||||
|
e) a_endpoint_address=$OPTARG ;;
|
||||||
|
E) b_endpoint_address=$OPTARG ;;
|
||||||
|
t) a_tunnel_address=$OPTARG ;;
|
||||||
|
T) b_tunnel_address=$OPTARG ;;
|
||||||
|
n) a_networks=$OPTARG ;;
|
||||||
|
N) b_networks=$OPTARG ;;
|
||||||
|
d) a_dns=$OPTARG ;;
|
||||||
|
D) b_dns=$OPTARG ;;
|
||||||
|
f) a_file=$OPTARG ;;
|
||||||
|
F) b_file=$OPTARG ;;
|
||||||
|
q) a_print_qr=1 ;;
|
||||||
|
Q) b_print_qr=1 ;;
|
||||||
|
o) a_print_opn=1 ;;
|
||||||
|
O) b_print_opn=1 ;;
|
||||||
|
p) port=$OPTARG ;;
|
||||||
|
k) persistent_keepalive=$OPTARG ;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
shift $((OPTIND-1))
|
||||||
|
|
||||||
|
cat << EOF > $a_file
|
||||||
|
[Interface]
|
||||||
|
PrivateKey = $a_privkey
|
||||||
|
Address = $a_tunnel_address
|
||||||
|
DNS = $b_dns
|
||||||
|
Port = $port
|
||||||
|
|
||||||
|
[Peer]
|
||||||
|
PublicKey = $b_pubkey
|
||||||
|
PresharedKey = $psk
|
||||||
|
AllowedIPs = $(echo $b_tunnel_address | cut -d '/' -f1)/32,$b_networks
|
||||||
|
Endpoint = ${b_endpoint_address}:${port}
|
||||||
|
PersistentKeepalive = $persistent_keepalive
|
||||||
|
EOF
|
||||||
|
|
||||||
|
echo -e "SIDE A\n-----\n"
|
||||||
|
if [ $a_print_qr -gt 0 ]; then
|
||||||
|
qrencode -t ansiutf8 < $a_file
|
||||||
|
elif [ $a_print_opn -gt 0 ]; then
|
||||||
|
echo -e "Paste the following values into your OPNsense Wireguard config\n"
|
||||||
|
echo -e "[Local]\n Public Key:\t\t$a_pubkey\n Private Key:\t\t$a_privkey\n Listen Port:\t\t$port\n Tunnel Address:\t$a_tunnel_address\n\n[Endpoint]\n Public Key:\t\t$b_pubkey\n Shared Secret:\t$psk\n Allowed IPs:\t\t$(echo $b_tunnel_address | cut -d '/' -f1)/32,$b_networks\n Endpoint Address:\t$b_endpoint_address\n Endpoint Port:\t$port\n Keepalive Interval:\t$persistent_keepalive\n"
|
||||||
|
else
|
||||||
|
cat $a_file
|
||||||
|
echo ""
|
||||||
|
fi
|
||||||
|
|
||||||
|
cat << EOF > $b_file
|
||||||
|
[Interface]
|
||||||
|
PrivateKey = $b_privkey
|
||||||
|
Address = $b_tunnel_address
|
||||||
|
DNS = $a_dns
|
||||||
|
Port = $port
|
||||||
|
|
||||||
|
[Peer]
|
||||||
|
PublicKey = $a_pubkey
|
||||||
|
PresharedKey = $psk
|
||||||
|
AllowedIPs = $(echo $a_tunnel_address | cut -d '/' -f1)/32,$a_networks
|
||||||
|
Endpoint = ${a_endpoint_address}:${port}
|
||||||
|
PersistentKeepalive = $persistent_keepalive
|
||||||
|
EOF
|
||||||
|
|
||||||
|
echo -e "SIDE B\n-----\n"
|
||||||
|
if [ $b_print_qr -gt 0 ]; then
|
||||||
|
qrencode -t ansiutf8 < $b_file
|
||||||
|
elif [ $b_print_opn -gt 0 ]; then
|
||||||
|
echo -e "Paste the following values into your OPNsense Wireguard config\n"
|
||||||
|
echo -e "[Local]\n Public Key:\t\t$b_pubkey\n Private Key:\t\t$b_privkey\n Listen Port:\t\t$port\n Tunnel Address:\t$b_tunnel_address\n\n[Endpoint]\n Public Key:\t\t$a_pubkey\n Shared Secret:\t$psk\n Allowed IPs:\t\t$(echo $a_tunnel_address | cut -d '/' -f1)/32,$a_networks\n Endpoint Address:\t$a_endpoint_address\n Endpoint Port:\t$port\n Keepalive Interval:\t$persistent_keepalive\n"
|
||||||
|
else
|
||||||
|
cat $b_file
|
||||||
|
echo ""
|
||||||
|
fi
|
||||||
Loading…
Reference in New Issue
Block a user