bec8ff27ae
- Fix: custom config with custom network interface name for firewall - Keep VPN tunnel interface in firewall state - Vul fix: only allow traffic through vpn interface when needed - Adapt code to adapt to network interface name - Remove outdated TUN and TAP constants
66 lines
2.1 KiB
Go
66 lines
2.1 KiB
Go
package vpn
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
|
|
"github.com/qdm12/gluetun/internal/configuration"
|
|
"github.com/qdm12/gluetun/internal/firewall"
|
|
"github.com/qdm12/gluetun/internal/models"
|
|
"github.com/qdm12/gluetun/internal/openvpn"
|
|
"github.com/qdm12/gluetun/internal/openvpn/custom"
|
|
"github.com/qdm12/gluetun/internal/provider"
|
|
"github.com/qdm12/golibs/command"
|
|
"github.com/qdm12/golibs/logging"
|
|
)
|
|
|
|
var (
|
|
errBuildConfig = errors.New("failed building configuration")
|
|
errWriteConfig = errors.New("failed writing configuration to file")
|
|
errWriteAuth = errors.New("failed writing auth to file")
|
|
errFirewall = errors.New("failed allowing VPN connection through firewall")
|
|
)
|
|
|
|
// setupOpenVPN sets OpenVPN up using the configurators and settings given.
|
|
// It returns a serverName for port forwarding (PIA) and an error if it fails.
|
|
func setupOpenVPN(ctx context.Context, fw firewall.VPNConnectionSetter,
|
|
openvpnConf openvpn.Interface, providerConf provider.Provider,
|
|
settings configuration.VPN, starter command.Starter, logger logging.Logger) (
|
|
runner vpnRunner, serverName string, err error) {
|
|
var connection models.Connection
|
|
var netInterface string
|
|
var lines []string
|
|
if settings.OpenVPN.Config == "" {
|
|
netInterface = settings.OpenVPN.Interface
|
|
connection, err = providerConf.GetConnection(settings.Provider.ServerSelection)
|
|
if err == nil {
|
|
lines = providerConf.BuildConf(connection, settings.OpenVPN)
|
|
}
|
|
} else {
|
|
lines, connection, netInterface, err = custom.BuildConfig(settings.OpenVPN)
|
|
}
|
|
if err != nil {
|
|
return nil, "", fmt.Errorf("%w: %s", errBuildConfig, err)
|
|
}
|
|
|
|
if err := openvpnConf.WriteConfig(lines); err != nil {
|
|
return nil, "", fmt.Errorf("%w: %s", errWriteConfig, err)
|
|
}
|
|
|
|
if settings.OpenVPN.User != "" {
|
|
err := openvpnConf.WriteAuthFile(settings.OpenVPN.User, settings.OpenVPN.Password)
|
|
if err != nil {
|
|
return nil, "", fmt.Errorf("%w: %s", errWriteAuth, err)
|
|
}
|
|
}
|
|
|
|
if err := fw.SetVPNConnection(ctx, connection, netInterface); err != nil {
|
|
return nil, "", fmt.Errorf("%w: %s", errFirewall, err)
|
|
}
|
|
|
|
runner = openvpn.NewRunner(settings.OpenVPN, starter, logger)
|
|
|
|
return runner, connection.Hostname, nil
|
|
}
|