57 lines
1.9 KiB
JavaScript
57 lines
1.9 KiB
JavaScript
'use strict';
|
|
|
|
const conf = require('@simpleworkjs/conf');
|
|
const { getRedis } = require('../models');
|
|
const { generateKeypair } = require('../utils/wg_keys');
|
|
const wgSite = require('../models/wg_site');
|
|
|
|
async function bootstrapWireguard() {
|
|
try {
|
|
const redis = await getRedis();
|
|
const P = conf.redis.prefix || '';
|
|
const keypairKey = `${P}wg_gateway_keypair`;
|
|
|
|
// 1. Ensure Gateway WireGuard Keypair
|
|
let keypairData = await redis.hGetAll(keypairKey);
|
|
if (!keypairData || !keypairData.publicKey) {
|
|
const kp = generateKeypair();
|
|
keypairData = {
|
|
privateKey: kp.privateKey,
|
|
publicKey: kp.publicKey,
|
|
createdAt: String(Date.now()),
|
|
};
|
|
await redis.hSet(keypairKey, keypairData);
|
|
console.log('[bootstrap] Generated fresh WireGuard Gateway keypair.');
|
|
}
|
|
|
|
if (!conf.wireguard) conf.wireguard = {};
|
|
conf.wireguard.serverPublicKey = keypairData.publicKey;
|
|
conf.wireguard.serverPrivateKey = keypairData.privateKey;
|
|
|
|
if (!conf.wireguard.serverEndpoint) {
|
|
const domain = conf.domain || 'suite.vm42.us';
|
|
conf.wireguard.serverEndpoint = `${domain}:51820`;
|
|
}
|
|
|
|
// 2. Ensure Default Site Exit Node ("This Site")
|
|
const existingSites = await wgSite.list().catch(() => []);
|
|
if (!existingSites || existingSites.length === 0) {
|
|
const siteName = conf.siteName || process.env.CFG_SITE_NAME || '718it';
|
|
const defaultSite = await wgSite.create({
|
|
name: `${siteName} (This Site)`,
|
|
endpoint: conf.wireguard.serverEndpoint,
|
|
publicKey: keypairData.publicKey,
|
|
subnet: '0.0.0.0/0',
|
|
exitAll: true,
|
|
siteId: siteName,
|
|
note: 'Default local site exit node initialized during bootstrap',
|
|
}, 'bootstrap');
|
|
console.log(`[bootstrap] Initialized default WireGuard exit node '${defaultSite.name}' (${defaultSite.id}).`);
|
|
}
|
|
} catch (err) {
|
|
console.error('[bootstrap] WireGuard bootstrap error:', err.message);
|
|
}
|
|
}
|
|
|
|
module.exports = { bootstrapWireguard };
|