mercury
31 lines
1.5 KiB
Bash
31 lines
1.5 KiB
Bash
INTERFACE=$(route | grep '^default' | grep -o '[^ ]*$')
|
|
if [ $(cat /etc/wireguard/wg0.conf | wc -c) -eq 0 ]
|
|
then
|
|
PRIVATEKEY=$(wg genkey | tee /etc/wireguard/privatekey)
|
|
echo "[Interface]" > /etc/wireguard/wg0.conf
|
|
echo "PrivateKey = $PRIVATEKEY" >> /etc/wireguard/wg0.conf
|
|
echo "Address = $ADDRESS" >> /etc/wireguard/wg0.conf
|
|
echo "ListenPort = $WGPORT" >> /etc/wireguard/wg0.conf
|
|
echo "PostUp = iptables -t nat -A POSTROUTING --destination 10.10.0.5 -j ACCEPT;iptables -t nat -A POSTROUTING -o $INTERFACE -j MASQUERADE" >> /etc/wireguard/wg0.conf
|
|
echo "PostDown = iptables -t nat -D POSTROUTING --destination 10.10.0.5 -j ACCEPT;iptables -t nat -D POSTROUTING -o $INTERFACE -j MASQUERADE" >> /etc/wireguard/wg0.conf
|
|
else
|
|
sed "s/PostUp.*/PostUp = iptables -t nat -A POSTROUTING --destination 10.10.0.5 -j ACCEPT;iptables -t nat -A POSTROUTING -o $INTERFACE -j MASQUERADE/" /etc/wireguard/wg0.conf > result
|
|
sed -i "s/PostDown.*/PostDown = iptables -t nat -D POSTROUTING --destination 10.10.0.5 -j ACCEPT;iptables -t nat -D POSTROUTING -o $INTERFACE -j MASQUERADE/" result
|
|
cat result > /etc/wireguard/wg0.conf
|
|
sed "s/ListenPort = [0-9]\+/ListenPort = $WGPORT/" /etc/wireguard/wg0.conf > change_port
|
|
cat change_port > /etc/wireguard/wg0.conf
|
|
fi
|
|
wg-quick up wg0
|
|
cat /ssh/key.pub > /root/.ssh/authorized_keys
|
|
ssh-keygen -A
|
|
exec /usr/sbin/sshd -D -e "$@" &
|
|
if [ $(cat /pac.json | jq .blocktorrent) -eq 1 ]
|
|
then
|
|
sh /block_torrent.sh
|
|
fi
|
|
if [ $(cat /pac.json | jq .exchange) -eq 1 ]
|
|
then
|
|
sh /block_exchange.sh
|
|
fi
|
|
tail -f /dev/null
|