65 lines
1.4 KiB
Go
65 lines
1.4 KiB
Go
|
package main
|
||
|
|
|
||
|
|
import (
|
||
|
|
"fmt"
|
||
|
|
"isle/daemon/daecommon"
|
||
|
|
)
|
||
|
|
|
||
|
|
type firewallRuleView struct {
|
||
|
|
Index int `yaml:"index"`
|
||
|
|
daecommon.ConfigFirewallRule `yaml:",inline"`
|
||
|
|
}
|
||
|
|
|
||
|
|
func newFirewallRuleViews(
|
||
|
|
rules []daecommon.ConfigFirewallRule,
|
||
|
|
) []firewallRuleView {
|
||
|
|
views := make([]firewallRuleView, len(rules))
|
||
|
|
for i := range rules {
|
||
|
|
views[i] = firewallRuleView{
|
||
|
|
Index: i,
|
||
|
|
ConfigFirewallRule: rules[i],
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return views
|
||
|
|
}
|
||
|
|
|
||
|
|
type firewallView struct {
|
||
|
|
Outbound []firewallRuleView `yaml:"outbound"`
|
||
|
|
Inbound []firewallRuleView `yaml:"inbound"`
|
||
|
|
}
|
||
|
|
|
||
|
|
func newFirewallView(firewallConfig daecommon.ConfigFirewall) firewallView {
|
||
|
|
return firewallView{
|
||
|
|
Outbound: newFirewallRuleViews(firewallConfig.Outbound),
|
||
|
|
Inbound: newFirewallRuleViews(firewallConfig.Inbound),
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
var subCmdVPNFirewallList = subCmd{
|
||
|
|
name: "list",
|
||
|
|
descr: "List all currently configured firewall rules",
|
||
|
|
do: doWithOutput(func(ctx subCmdCtx) (any, error) {
|
||
|
|
ctx, err := ctx.withParsedFlags()
|
||
|
|
if err != nil {
|
||
|
|
return nil, fmt.Errorf("parsing flags: %w", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
config, err := ctx.getDaemonRPC().GetConfig(ctx)
|
||
|
|
if err != nil {
|
||
|
|
return nil, fmt.Errorf("getting network config: %w", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
return newFirewallView(config.VPN.Firewall), nil
|
||
|
|
}),
|
||
|
|
}
|
||
|
|
|
||
|
|
var subCmdVPNFirewall = subCmd{
|
||
|
|
name: "firewall",
|
||
|
|
descr: "Sub-commands related to this host's VPN firewall",
|
||
|
|
do: func(ctx subCmdCtx) error {
|
||
|
|
return ctx.doSubCmd(
|
||
|
|
subCmdVPNFirewallList,
|
||
|
|
)
|
||
|
|
},
|
||
|
|
}
|