scripts

ansible/protocols/wg/postup.sh

 #!/usr/bin/env bash
 set -e
 
-ip addr add "$loadlPeerAddress" peer "$remotePeerAddress" dev %i
+ip addr add "$loadlPeerAddress" peer "$remotePeerAddress" dev "$dev"
 
 if [ "$inbound" != true ] ; then
-  ip route add default dev %i table "$remoteMark"
+  ip route add default dev "$dev" table "$remoteMark"
   ip rule add fwmark "$remoteMark" table "$remoteMark" pref 300
 fi
 
 if [ -z "${mtu}" ]; then
-    mtu=$(cat /sys/class/net/%i/mtu)
+    mtu=$(cat /sys/class/net/"$dev"/mtu)
 fi
 
 mss=$((mtu - 40))
 
-iptables -t mangle -A FORWARD -i %i -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss $mss:1460 -j TCPMSS --set-mss $mss
-iptables -t mangle -A FORWARD -o %i -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss $mss:1460 -j TCPMSS --set-mss $mss
+iptables -t mangle -A FORWARD -i "$dev" -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss $mss:1460 -j TCPMSS --set-mss $mss
+iptables -t mangle -A FORWARD -o "$dev" -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss $mss:1460 -j TCPMSS --set-mss $mss
 
-iptables -t mangle -A PREROUTING -i %i -m set ! --match-set mycard src -j CONNMARK --set-xmark "$remoteMark"
+iptables -t mangle -A PREROUTING -i "$dev" -m set ! --match-set mycard src -j CONNMARK --set-xmark "$remoteMark"
 iptables -t mangle -A PREROUTING -m connmark --mark "$remoteMark" -j CONNMARK --restore-mark
 iptables -t mangle -A OUTPUT -m connmark --mark "$remoteMark" -j CONNMARK --restore-mark

ansible/protocols/wg/predown.sh

@@ -6,14 +6,14 @@ if [ "$inbound" != true ] ; then
 fi
 
 if [ -z "${mtu}" ]; then
-    mtu=$(cat /sys/class/net/%i/mtu)
+    mtu=$(cat /sys/class/net/"$dev"/mtu)
 fi
 
 mss=$((mtu - 40))
 
-iptables -t mangle -D FORWARD -i %i -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss $mss:1460 -j TCPMSS --set-mss $mss
-iptables -t mangle -D FORWARD -o %i -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss $mss:1460 -j TCPMSS --set-mss $mss
+iptables -t mangle -D FORWARD -i "$dev" -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss $mss:1460 -j TCPMSS --set-mss $mss
+iptables -t mangle -D FORWARD -o "$dev" -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss $mss:1460 -j TCPMSS --set-mss $mss
 
-iptables -t mangle -D PREROUTING -i %i -m set ! --match-set mycard src -j CONNMARK --set-xmark "$remoteMark"
+iptables -t mangle -D PREROUTING -i "$dev" -m set ! --match-set mycard src -j CONNMARK --set-xmark "$remoteMark"
 iptables -t mangle -D PREROUTING -m connmark --mark "$remoteMark" -j CONNMARK --restore-mark
 iptables -t mangle -D OUTPUT -m connmark --mark "$remoteMark" -j CONNMARK --restore-mark

ansible/protocols/wg/wg.conf.j2

@@ -6,8 +6,8 @@ ListenPort = {{conn.localPort}}
 FwMark = {{conn.localGatewayMark}}
 {% endif %}
 Table = off
-PostUp = "localPeerAddress='{{conn.localPeerAddress}}' remoteMark='{{conn.remoteMark}}' {% if conn.inbound is defined %}inbound='{{conn.inbound}}'{% endif %} {% if conn.mtu is defined %}mtu='{{conn.mtu}}'{% endif %} /tmp/nextgen/postup.sh"
-PreDown = "localPeerAddress='{{conn.localPeerAddress}}' remoteMark='{{conn.remoteMark}}' {% if conn.inbound is defined %}inbound='{{conn.inbound}}'{% endif %} {% if conn.mtu is defined %}mtu='{{conn.mtu}}'{% endif %} /tmp/nextgen/predown.sh"
+PostUp = "dev='%i' localPeerAddress='{{conn.localPeerAddress}}' remoteMark='{{conn.remoteMark}}' {% if conn.inbound is defined %}inbound='{{conn.inbound}}'{% endif %} {% if conn.mtu is defined %}mtu='{{conn.mtu}}'{% endif %} /tmp/nextgen/postup.sh"
+PreDown = "dev='%i' localPeerAddress='{{conn.localPeerAddress}}' remoteMark='{{conn.remoteMark}}' {% if conn.inbound is defined %}inbound='{{conn.inbound}}'{% endif %} {% if conn.mtu is defined %}mtu='{{conn.mtu}}'{% endif %} /tmp/nextgen/predown.sh"
 [Peer]
 PublicKey = {{conn.wgPublicKey}}
 AllowedIPs = 0.0.0.0/0, ::/0