rlwj-lab/opsx-vpn
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add bundled WireGuard diagnostics and application proxy

Browse Source
This commit is contained in:
opsx committed 2026-10-21 18:00:21 +08:00
1 parent 6dd3c7dd45
commit eabb3e4472
20 files changed
+1129 -76
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

backend/internal/service/wireguard/wireguard.go
+6 -3
View File
@@ -781,8 +781,12 @@ func renderServerConfig(cfg map[string]interface{}, serverPrivate string, peers
}
if service.Bool(cfg, "enable_nat", false) {
egress := service.Str(cfg, "egress_interface")
fmt.Fprintf(&b, "PostUp = iptables -A FORWARD -i %%i -j ACCEPT; iptables -A FORWARD -o %%i -j ACCEPT; iptables -t nat -A POSTROUTING -o %s -j MASQUERADE\n", egress)
fmt.Fprintf(&b, "PostDown = iptables -D FORWARD -i %%i -j ACCEPT; iptables -D FORWARD -o %%i -j ACCEPT; iptables -t nat -D POSTROUTING -o %s -j MASQUERADE\n", egress)
source := service.Str(cfg, "address")
if _, subnet, err := net.ParseCIDR(source); err == nil {
source = subnet.String()
}
fmt.Fprintf(&b, "PostUp = iptables -A FORWARD -i %%i -j ACCEPT; iptables -A FORWARD -o %%i -j ACCEPT; iptables -t nat -A POSTROUTING -s %s -o %s -j MASQUERADE\n", source, egress)
fmt.Fprintf(&b, "PostDown = iptables -D FORWARD -i %%i -j ACCEPT; iptables -D FORWARD -o %%i -j ACCEPT; iptables -t nat -D POSTROUTING -s %s -o %s -j MASQUERADE\n", source, egress)
}
for _, p := range peers {
if !p.Enabled {
@@ -806,4 +810,3 @@ func validateCIDRList(value string) error {
}
return nil
}