mirror of
https://github.com/karen07/openwrt-mesh-builder.git
synced 2026-08-04 21:41:49 +00:00
129 lines
4.2 KiB
Python
Executable file
129 lines
4.2 KiB
Python
Executable file
#!/usr/bin/env python3
|
|
import sys
|
|
|
|
sys.dont_write_bytecode = True
|
|
import shutil
|
|
|
|
try:
|
|
from .common import *
|
|
from .tunnel_model import ipip_mtu_value
|
|
except ImportError:
|
|
from common import * # type: ignore
|
|
from tunnel_model import ipip_mtu_value # type: ignore
|
|
|
|
|
|
def build_server_babeld_conf(
|
|
hub: ExitHub,
|
|
states: list[RouterExitState],
|
|
exit_exit_aliases: list[str],
|
|
) -> str:
|
|
_ = hub
|
|
ifaces = sorted({st.client_alias for st in states} | set(exit_exit_aliases))
|
|
lines = [
|
|
f"interface {iface} type {BABELD_TUNNEL_TYPE} "
|
|
f"hello-interval {BABELD_HELLO_INTERVAL} "
|
|
f"update-interval {BABELD_UPDATE_INTERVAL}"
|
|
for iface in ifaces
|
|
]
|
|
lines += [
|
|
"",
|
|
"install allow",
|
|
"",
|
|
f"redistribute if {NODE_SERVER_IFACE} allow",
|
|
f"redistribute if {IPIP_SERVER_IFACE} allow",
|
|
"redistribute local deny",
|
|
"",
|
|
]
|
|
return "\n".join(lines)
|
|
|
|
|
|
def shell_quote(value: str) -> str:
|
|
return "'" + value.replace("'", "'\"'\"'") + "'"
|
|
|
|
|
|
def build_server_env(
|
|
cfg: ConfigData,
|
|
hub: ExitHub,
|
|
states: list[RouterExitState],
|
|
exit_exit_aliases: list[str],
|
|
) -> str:
|
|
service_names = sorted(
|
|
{f"awg-quick@{st.client_alias}.service" for st in states}
|
|
| {f"awg-quick@{alias}.service" for alias in exit_exit_aliases}
|
|
)
|
|
awg_services = " ".join(service_names)
|
|
|
|
values = {
|
|
"SERVER_NAME": hub.name,
|
|
"NODE_ADDR4": exit_node_addr4(hub),
|
|
"NODE_IFACE": NODE_SERVER_IFACE,
|
|
"LISTEN_IP": hub.listen_ip,
|
|
"EXIT_IP": hub.exit_ip,
|
|
"IPIP_IFACE": IPIP_SERVER_IFACE,
|
|
"IPIP_ADDR4": exit_ipip_endpoint_addr4(hub),
|
|
**({"IPIP_MTU": str(ipip_mtu_value())} if ipip_mtu_value() is not None else {}),
|
|
"EXIT_SUBNETS": server_exit_subnets(cfg),
|
|
"IPSET_NAME": SERVER_ENV_IPSET_NAME,
|
|
"IPSETS_DIR": RUNTIME_IPSETS_DIR,
|
|
"STATIC_DIRECT_NAME": RUNTIME_DIRECT_STATIC_NAME,
|
|
"OUT_DIRECT_NAME": RUNTIME_DIRECT_OUT_NAME,
|
|
"DIRECT_COUNTRIES": " ".join(cfg.exit_direct.countries),
|
|
"DIRECT_ASNS": " ".join(cfg.exit_direct.asns),
|
|
"UPDATE_IPSETS_CURL_CONNECT_TIMEOUT": str(UPDATE_IPSETS_CURL_CONNECT_TIMEOUT),
|
|
"UPDATE_IPSETS_CURL_MAX_TIME": str(UPDATE_IPSETS_CURL_MAX_TIME),
|
|
"UPDATE_IPSETS_CURL_RETRY": str(UPDATE_IPSETS_CURL_RETRY),
|
|
"AWG_SERVICES": awg_services,
|
|
"BABELD_CONF": server_babeld_conf_remote_path(hub.name),
|
|
}
|
|
|
|
lines = [
|
|
"# Generated by generate.py. Do not edit on the server.",
|
|
"# Runtime settings consumed by /etc/awg-server.sh.",
|
|
]
|
|
for key, value in values.items():
|
|
lines.append(f"{key}={shell_quote(value)}")
|
|
lines.append("")
|
|
return "\n".join(lines)
|
|
|
|
|
|
def reconcile_server_dirs(keep_exit_names: set[str]) -> None:
|
|
SERVER_ROOT.mkdir(parents=True, exist_ok=True)
|
|
protected = {server_dir_name(name) for name in keep_exit_names}
|
|
protected.add(SERVER_TEMPLATE_NAME)
|
|
|
|
for child in SERVER_ROOT.iterdir():
|
|
if child.is_dir() and child.name not in protected:
|
|
rm(child)
|
|
|
|
|
|
def ensure_server_layout(exit_name: str) -> None:
|
|
dst = server_exit_dir(exit_name)
|
|
if not dst.exists():
|
|
if not SERVER_TEMPLATE_DIR.is_dir():
|
|
die(f"missing server example directory: {SERVER_TEMPLATE_DIR}")
|
|
print(f"Creating {dst} from {SERVER_TEMPLATE_DIR}")
|
|
shutil.copytree(SERVER_TEMPLATE_DIR, dst, copy_function=shutil.copy2)
|
|
else:
|
|
cp_tree(SERVER_TEMPLATE_DIR, dst)
|
|
|
|
for p in (
|
|
server_path(exit_name, "etc"),
|
|
server_amneziawg_dir(exit_name),
|
|
server_path(exit_name, "etc", "ipsets"),
|
|
server_path(exit_name, "etc", "systemd", "system"),
|
|
):
|
|
p.mkdir(parents=True, exist_ok=True)
|
|
|
|
|
|
def remove_stale_server_amneziawg_confs(exit_name: str, keep_aliases: set[str]) -> None:
|
|
conf_dir = server_amneziawg_dir(exit_name)
|
|
conf_dir.mkdir(parents=True, exist_ok=True)
|
|
keep_files = {f"{alias}.conf" for alias in keep_aliases}
|
|
|
|
for child in conf_dir.iterdir():
|
|
if (
|
|
child.is_file()
|
|
and child.name.endswith(".conf")
|
|
and child.name not in keep_files
|
|
):
|
|
rm(child)
|