datadunia
760e0e88fa
- Added install.sh for easy setup and teardown - Added build.sh and build.bat to dynamically assemble install.sh - Updated README.md with new installation instructions - Fixed bidirectional WG_POLICY FORWARD rule routing in wg-policy-engine.sh
127 lines
3.7 KiB
Bash
127 lines
3.7 KiB
Bash
#!/bin/bash
|
|
# build.sh - Generates the install.sh file dynamically by embedding .sh and .service files
|
|
|
|
set -euo pipefail
|
|
|
|
INSTALL_SCRIPT="install.sh"
|
|
|
|
echo "Building ${INSTALL_SCRIPT}..."
|
|
|
|
# Write the header
|
|
cat << 'MAIN_EOF' > "$INSTALL_SCRIPT"
|
|
#!/bin/bash
|
|
# WireGuard Policy Firewall Installer/Uninstaller
|
|
# This file is auto-generated. Do not edit directly. Run build.sh or build.bat instead.
|
|
|
|
set -euo pipefail
|
|
|
|
if [[ $EUID -ne 0 ]]; then
|
|
echo "This script must be run as root."
|
|
exit 1
|
|
fi
|
|
|
|
install_policy() {
|
|
echo "Installing WireGuard Policy Firewall..."
|
|
|
|
echo "Checking dependencies..."
|
|
apt-get update -y || true
|
|
apt-get install -y jq inotify-tools ipset iptables || true
|
|
|
|
echo "Writing scripts to /usr/local/bin/..."
|
|
|
|
MAIN_EOF
|
|
|
|
# Helper function to append file content inside a heredoc
|
|
append_file() {
|
|
local file=$1
|
|
local target=$2
|
|
local delimiter="EOF_${file//[-.]/_}"
|
|
delimiter=$(echo "$delimiter" | tr '[:lower:]' '[:upper:]')
|
|
|
|
echo " cat << '${delimiter}' > ${target}" >> "$INSTALL_SCRIPT"
|
|
cat "$file" >> "$INSTALL_SCRIPT"
|
|
|
|
# Ensure there is a newline before the EOF marker just in case the file lacks it
|
|
echo "" >> "$INSTALL_SCRIPT"
|
|
echo "${delimiter}" >> "$INSTALL_SCRIPT"
|
|
echo "" >> "$INSTALL_SCRIPT"
|
|
}
|
|
|
|
# Append all necessary files
|
|
append_file "wg-policy-lib.sh" "/usr/local/bin/wg-policy-lib.sh"
|
|
append_file "wg-policy-engine.sh" "/usr/local/bin/wg-policy-engine.sh"
|
|
append_file "wg-policy-cleanup.sh" "/usr/local/bin/wg-policy-cleanup.sh"
|
|
append_file "wg-sync-policy.sh" "/usr/local/bin/wg-sync-policy.sh"
|
|
append_file "wg-sync-watch.sh" "/usr/local/bin/wg-sync-watch.sh"
|
|
append_file "wg-policy-ctl" "/usr/local/bin/wg-policy-ctl"
|
|
|
|
cat << 'MAIN_EOF_MID' >> "$INSTALL_SCRIPT"
|
|
echo "Writing systemd units to /etc/systemd/system/..."
|
|
|
|
MAIN_EOF_MID
|
|
|
|
append_file "wg-policy.service" "/etc/systemd/system/wg-policy.service"
|
|
append_file "wg-policy-health.service" "/etc/systemd/system/wg-policy-health.service"
|
|
append_file "wg-policy-health.timer" "/etc/systemd/system/wg-policy-health.timer"
|
|
|
|
# Write the rest of the installation and uninstallation logic
|
|
cat << 'MAIN_EOF_END' >> "$INSTALL_SCRIPT"
|
|
chmod +x /usr/local/bin/wg-*.sh /usr/local/bin/wg-policy-ctl
|
|
|
|
echo "Reloading systemd daemon..."
|
|
systemctl daemon-reload
|
|
|
|
echo "Enabling and starting services..."
|
|
systemctl enable --now wg-policy.service
|
|
systemctl enable --now wg-policy-health.timer
|
|
|
|
echo "Installation complete!"
|
|
echo "You can check status with: wg-policy-ctl status"
|
|
}
|
|
|
|
uninstall_policy() {
|
|
echo "Uninstalling WireGuard Policy Firewall..."
|
|
|
|
echo "Stopping and disabling services..."
|
|
systemctl disable --now wg-policy.service wg-policy-health.timer wg-policy-health.service 2>/dev/null || true
|
|
|
|
echo "Running cleanup script..."
|
|
if [ -x /usr/local/bin/wg-policy-cleanup.sh ]; then
|
|
/usr/local/bin/wg-policy-cleanup.sh || true
|
|
fi
|
|
|
|
echo "Removing systemd units..."
|
|
rm -f /etc/systemd/system/wg-policy.service
|
|
rm -f /etc/systemd/system/wg-policy-health.service
|
|
rm -f /etc/systemd/system/wg-policy-health.timer
|
|
systemctl daemon-reload
|
|
|
|
echo "Removing scripts from /usr/local/bin/..."
|
|
rm -f /usr/local/bin/wg-policy-lib.sh
|
|
rm -f /usr/local/bin/wg-sync-policy.sh
|
|
rm -f /usr/local/bin/wg-policy-engine.sh
|
|
rm -f /usr/local/bin/wg-policy-cleanup.sh
|
|
rm -f /usr/local/bin/wg-sync-watch.sh
|
|
rm -f /usr/local/bin/wg-policy-ctl
|
|
|
|
echo "Uninstallation complete!"
|
|
}
|
|
|
|
case "${1:-}" in
|
|
install)
|
|
install_policy
|
|
;;
|
|
uninstall)
|
|
uninstall_policy
|
|
;;
|
|
*)
|
|
echo "Usage: $0 {install|uninstall}"
|
|
exit 1
|
|
;;
|
|
esac
|
|
MAIN_EOF_END
|
|
|
|
chmod +x "$INSTALL_SCRIPT"
|
|
|
|
echo "Done! Generated ${INSTALL_SCRIPT} successfully."
|