avoid unnecessary nested content
This commit is contained in:
23
torrents/config/98-gateway-setup
Executable file
23
torrents/config/98-gateway-setup
Executable file
@@ -0,0 +1,23 @@
|
||||
#!/command/with-contenv bash
|
||||
|
||||
echo "Obtaining Wireguard Server IP..."
|
||||
wgserver=$(grep Endpoint "${CONFIG_DIR}/wireguard/wg0.conf" | awk '{print $3}')
|
||||
echo "IP: ${wgserver%:*}"
|
||||
|
||||
echo "Obtaining default gateway..."
|
||||
gateway=$(ip -o -4 route show to default | awk '{print $3}')
|
||||
echo "Gateway: ${gateway}"
|
||||
|
||||
echo "Adding route to Wireguard Server via Default Gateway"
|
||||
ip route add ${wgserver%:*}/32 via ${gateway} dev eth0
|
||||
|
||||
echo "Allow DNS resolution locally"
|
||||
iptables -A INPUT -i eth0 -p udp -m udp --sport 53 -j ACCEPT
|
||||
iptables -A OUTPUT -o eth0 -p udp -m udp --dport 53 -j ACCEPT
|
||||
|
||||
echo "Allow docker networks to connect"
|
||||
docker_cirds=$(ip -o -4 route show proto kernel | awk '{print $1}')
|
||||
for cidr in $docker_cirds; do
|
||||
iptables -A INPUT -s "${cidr}" -d "${cidr}" -j ACCEPT
|
||||
iptables -A OUTPUT -s "${cidr}" -d "${cidr}" -j ACCEPT
|
||||
done
|
||||
Reference in New Issue
Block a user