feat: add installer script and builder tools

- Added install.sh for easy setup and teardown - Added build.sh and build.bat to dynamically assemble install.sh - Updated README.md with new installation instructions - Fixed bidirectional WG_POLICY FORWARD rule routing in wg-policy-engine.sh
2026-05-01 15:35:31 +07:00
parent 0b19a9061f
commit 760e0e88fa
5 changed files with 1577 additions and 23 deletions
@@ -0,0 +1,126 @@
+#!/bin/bash
+# build.sh - Generates the install.sh file dynamically by embedding .sh and .service files
+
+set -euo pipefail
+
+INSTALL_SCRIPT="install.sh"
+
+echo "Building ${INSTALL_SCRIPT}..."
+
+# Write the header
+cat << 'MAIN_EOF' > "$INSTALL_SCRIPT"
+#!/bin/bash
+# WireGuard Policy Firewall Installer/Uninstaller
+# This file is auto-generated. Do not edit directly. Run build.sh or build.bat instead.
+
+set -euo pipefail
+
+if [[ $EUID -ne 0 ]]; then
+   echo "This script must be run as root." 
+   exit 1
+fi
+
+install_policy() {
+    echo "Installing WireGuard Policy Firewall..."
+
+    echo "Checking dependencies..."
+    apt-get update -y || true
+    apt-get install -y jq inotify-tools ipset iptables || true
+
+    echo "Writing scripts to /usr/local/bin/..."
+
+MAIN_EOF
+
+# Helper function to append file content inside a heredoc
+append_file() {
+    local file=$1
+    local target=$2
+    local delimiter="EOF_${file//[-.]/_}"
+    delimiter=$(echo "$delimiter" | tr '[:lower:]' '[:upper:]')
+    
+    echo "    cat << '${delimiter}' > ${target}" >> "$INSTALL_SCRIPT"
+    cat "$file" >> "$INSTALL_SCRIPT"
+    
+    # Ensure there is a newline before the EOF marker just in case the file lacks it
+    echo "" >> "$INSTALL_SCRIPT"
+    echo "${delimiter}" >> "$INSTALL_SCRIPT"
+    echo "" >> "$INSTALL_SCRIPT"
+}
+
+# Append all necessary files
+append_file "wg-policy-lib.sh" "/usr/local/bin/wg-policy-lib.sh"
+append_file "wg-policy-engine.sh" "/usr/local/bin/wg-policy-engine.sh"
+append_file "wg-policy-cleanup.sh" "/usr/local/bin/wg-policy-cleanup.sh"
+append_file "wg-sync-policy.sh" "/usr/local/bin/wg-sync-policy.sh"
+append_file "wg-sync-watch.sh" "/usr/local/bin/wg-sync-watch.sh"
+append_file "wg-policy-ctl" "/usr/local/bin/wg-policy-ctl"
+
+cat << 'MAIN_EOF_MID' >> "$INSTALL_SCRIPT"
+    echo "Writing systemd units to /etc/systemd/system/..."
+
+MAIN_EOF_MID
+
+append_file "wg-policy.service" "/etc/systemd/system/wg-policy.service"
+append_file "wg-policy-health.service" "/etc/systemd/system/wg-policy-health.service"
+append_file "wg-policy-health.timer" "/etc/systemd/system/wg-policy-health.timer"
+
+# Write the rest of the installation and uninstallation logic
+cat << 'MAIN_EOF_END' >> "$INSTALL_SCRIPT"
+    chmod +x /usr/local/bin/wg-*.sh /usr/local/bin/wg-policy-ctl
+
+    echo "Reloading systemd daemon..."
+    systemctl daemon-reload
+    
+    echo "Enabling and starting services..."
+    systemctl enable --now wg-policy.service
+    systemctl enable --now wg-policy-health.timer
+    
+    echo "Installation complete!"
+    echo "You can check status with: wg-policy-ctl status"
+}
+
+uninstall_policy() {
+    echo "Uninstalling WireGuard Policy Firewall..."
+
+    echo "Stopping and disabling services..."
+    systemctl disable --now wg-policy.service wg-policy-health.timer wg-policy-health.service 2>/dev/null || true
+
+    echo "Running cleanup script..."
+    if [ -x /usr/local/bin/wg-policy-cleanup.sh ]; then
+        /usr/local/bin/wg-policy-cleanup.sh || true
+    fi
+
+    echo "Removing systemd units..."
+    rm -f /etc/systemd/system/wg-policy.service
+    rm -f /etc/systemd/system/wg-policy-health.service
+    rm -f /etc/systemd/system/wg-policy-health.timer
+    systemctl daemon-reload
+
+    echo "Removing scripts from /usr/local/bin/..."
+    rm -f /usr/local/bin/wg-policy-lib.sh
+    rm -f /usr/local/bin/wg-sync-policy.sh
+    rm -f /usr/local/bin/wg-policy-engine.sh
+    rm -f /usr/local/bin/wg-policy-cleanup.sh
+    rm -f /usr/local/bin/wg-sync-watch.sh
+    rm -f /usr/local/bin/wg-policy-ctl
+
+    echo "Uninstallation complete!"
+}
+
+case "${1:-}" in
+    install)
+        install_policy
+        ;;
+    uninstall)
+        uninstall_policy
+        ;;
+    *)
+        echo "Usage: $0 {install|uninstall}"
+        exit 1
+        ;;
+esac
+MAIN_EOF_END
+
+chmod +x "$INSTALL_SCRIPT"
+
+echo "Done! Generated ${INSTALL_SCRIPT} successfully."