55 lines
2.5 KiB
Bash
Executable File
55 lines
2.5 KiB
Bash
Executable File
#!/bin/sh
|
|
set -e
|
|
. /usr/share/debconf/confmodule
|
|
|
|
case "$1" in
|
|
configure)
|
|
# --- Read the installer's answers ---
|
|
db_get vpn-router/platform; VPN_ROUTER_PLATFORM="$RET"
|
|
db_get vpn-router/external_interface; VPN_ROUTER_EXTERNAL_INTERFACE="$RET"
|
|
db_get vpn-router/internal_interface; VPN_ROUTER_INTERNAL_INTERFACE="$RET"
|
|
db_get vpn-router/local_fqdn; VPN_ROUTER_LOCAL_FQDN="$RET"
|
|
db_get vpn-router/local_id_mode; VPN_ROUTER_LOCAL_ID_MODE="$RET"
|
|
db_get vpn-router/local_cidrs; VPN_ROUTER_LOCAL_CIDRS="$RET"
|
|
db_get vpn-router/int_gateway_ip; VPN_ROUTER_INT_GATEWAY_IP="$RET"
|
|
db_get vpn-router/remote_addrs; VPN_ROUTER_REMOTE_ADDRS="$RET"
|
|
db_get vpn-router/remote_id; VPN_ROUTER_REMOTE_ID="$RET"
|
|
db_get vpn-router/remote_cidrs; VPN_ROUTER_REMOTE_CIDRS="$RET"
|
|
db_get vpn-router/psk; VPN_ROUTER_PSK="$RET"
|
|
db_get vpn-router/p2s_enabled; VPN_ROUTER_P2S_ENABLED="$RET"
|
|
db_get vpn-router/p2s_address_pool; VPN_ROUTER_P2S_ADDRESS_POOL="$RET"
|
|
db_get vpn-router/p2s_ca_name; VPN_ROUTER_P2S_CA_NAME="$RET"
|
|
db_get vpn-router/wg_enabled; VPN_ROUTER_WG_ENABLED="$RET"
|
|
db_get vpn-router/wg_address; VPN_ROUTER_WG_ADDRESS="$RET"
|
|
db_get vpn-router/wg_listen_port; VPN_ROUTER_WG_LISTEN_PORT="$RET"
|
|
|
|
export VPN_ROUTER_PLATFORM VPN_ROUTER_EXTERNAL_INTERFACE \
|
|
VPN_ROUTER_INTERNAL_INTERFACE VPN_ROUTER_LOCAL_FQDN \
|
|
VPN_ROUTER_LOCAL_ID_MODE VPN_ROUTER_LOCAL_CIDRS \
|
|
VPN_ROUTER_INT_GATEWAY_IP \
|
|
VPN_ROUTER_REMOTE_ADDRS VPN_ROUTER_REMOTE_ID \
|
|
VPN_ROUTER_REMOTE_CIDRS VPN_ROUTER_PSK \
|
|
VPN_ROUTER_P2S_ENABLED VPN_ROUTER_P2S_ADDRESS_POOL \
|
|
VPN_ROUTER_P2S_CA_NAME VPN_ROUTER_WG_ENABLED \
|
|
VPN_ROUTER_WG_ADDRESS VPN_ROUTER_WG_LISTEN_PORT
|
|
|
|
# --- Create the configuration file, only if it does not exist ---
|
|
/usr/lib/vpn-router/seed-config
|
|
|
|
# The key now lives in the configuration file; do not keep a copy.
|
|
db_set vpn-router/psk ""
|
|
|
|
# Apply the sysctl drop-in shipped by this package so it takes effect
|
|
# without waiting for a reboot.
|
|
sysctl --system >/dev/null
|
|
|
|
# The firewall is not touched here. Enabling it, allowing SSH and
|
|
# setting the forward policy all belong to vpn-router-setup, which does
|
|
# them only once the configuration says this host is a router.
|
|
;;
|
|
esac
|
|
|
|
#DEBHELPER#
|
|
|
|
db_stop
|