ebc32cae86
Installer now expects Debian 12 and requires base-stack repo installed first New systemd files New wg-client-zip-email.sh script Moved bash scripts into sbin dir Install & configure firewalld instead of ufw wg.sh now has configurable options - DNS nameserver settings - endpoint (FQDN or IP) - AllowedIPs (defaults to 0.0.0.0/0) Change the client network from 10.96.0.0/12 (1,048,574 max clients / IPs) to 10.96.0.0/16 (65,025 max clients / IPs)
58 lines
1.5 KiB
Bash
Executable File
58 lines
1.5 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# vpn-stack
|
|
# A set of bash scripts for installing and managing a WireGuard VPN server.
|
|
# https://git.stack-source.com/msb/vpn-stack
|
|
# Copyright (c) 2022 Matthew Saunders Brown <matthewsaundersbrown@gmail.com>
|
|
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
|
|
# load include file
|
|
source $(dirname $0)/wg.sh
|
|
|
|
help()
|
|
{
|
|
thisfilename=$(basename -- "$0")
|
|
echo "Delete VPN client config."
|
|
echo ""
|
|
echo "usage: $thisfilename -c <client> [-h]"
|
|
echo ""
|
|
echo " -h Print this help."
|
|
echo " -c <client> Name of the client configuration."
|
|
}
|
|
|
|
wg::getoptions "$@"
|
|
|
|
# check for client config name
|
|
if [[ -z $client ]]; then
|
|
echo "client name is required"
|
|
exit
|
|
fi
|
|
|
|
# set config file name
|
|
config=$client.conf
|
|
|
|
# check for server config
|
|
if [ -f /etc/wireguard/peers/$config ]; then
|
|
peer=$(grep PublicKey /etc/wireguard/peers/$config|cut -d ' ' -f 3)
|
|
wg set wg0 peer $peer remove
|
|
wg-quick save wg0
|
|
rm /etc/wireguard/peers/$config
|
|
echo "peer and server config for $client removed"
|
|
fi
|
|
|
|
# check for client config
|
|
if [ -f /etc/wireguard/clients/$config ]; then
|
|
rm /etc/wireguard/clients/$config
|
|
echo "client config for $client removed"
|
|
fi
|
|
|
|
# check for png & zip files
|
|
if [[ -f /var/lib/wireguard/$config.png ]]; then
|
|
rm /var/lib/wireguard/$config.png
|
|
echo "png image for $client removed"
|
|
fi
|
|
if [[ -f /var/lib/wireguard/$config.zip ]]; then
|
|
echo "zip file for $client removed"
|
|
rm /var/lib/wireguard/$config.zip
|
|
fi
|