nils/gluon
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

gluon-mesh-vpn-core: migrate to gluon-nftables

Browse Source
This commit is contained in:
Maciej Krüger 2023-04-25 22:07:07 +02:00
parent 09eec29c7d
commit d9634cd815
No known key found for this signature in database
GPG Key ID: 0D948CE19CF49C5F
4 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
package/gluon-mesh-vpn-core/Makefile
View File

@ -6,7 +6,7 @@ include ../gluon.mk
define Package/gluon-mesh-vpn-core
TITLE:=Basic support for connecting meshes via VPN tunnels
DEPENDS:=+gluon-core +gluon-wan-dnsmasq +simple-tc
DEPENDS:=+gluon-core +gluon-nftables +gluon-wan-dnsmasq +simple-tc
USERID:=:gluon-mesh-vpn=800
endef

0
package/gluon-mesh-vpn-core/files/lib/gluon/mesh-vpn/nftables.rules → package/gluon-mesh-vpn-core/files/lib/gluon/nftables/mesh_vpn_dns.nft
View File

4
package/gluon-mesh-vpn-core/luasrc/lib/gluon/nftables/mesh_vpn.lua Normal file
View File

@ -0,0 +1,4 @@
include('mesh_vpn_dns', {
position = 'chain-prepend',
chain = 'dstnat',
})

9
package/gluon-mesh-vpn-core/luasrc/lib/gluon/upgrade/500-mesh-vpn
View File

@ -25,15 +25,6 @@ uci:save('network')
users.remove_user('gluon-fastd')
users.remove_group('gluon-fastd')
uci:section('firewall', 'include', 'mesh_vpn_dns', {
type = 'nftables',
path = '/lib/gluon/mesh-vpn/nftables.rules',
position = 'chain-prepend',
chain = 'dstnat',
})
uci:save('firewall')
-- VPN migration
if not uci:get('gluon', 'mesh_vpn') then