wireguard_webadmin/wireguard_peer/forms.py

from django import forms
from wireguard.models import Peer, PeerAllowedIP, NETMASK_CHOICES
import ipaddress


class PeerForm(forms.ModelForm):
    name = forms.CharField(label='Name', required=False)
    public_key = forms.CharField(label='Public Key', required=True)
    private_key = forms.CharField(label='Private Key', required=False)
    pre_shared_key = forms.CharField(label='Pre-Shared Key', required=True)
    persistent_keepalive = forms.IntegerField(label='Persistent Keepalive', required=True)
    
    class Meta:
        model = Peer
        fields = ['name', 'public_key', 'private_key', 'pre_shared_key', 'persistent_keepalive']
        

class PeerAllowedIPForm(forms.ModelForm):
    def __init__(self, *args, **kwargs):
        current_peer = kwargs.pop('current_peer', None)
        super().__init__(*args, **kwargs)
        self.current_peer = current_peer
        
    allowed_ip = forms.GenericIPAddressField(label='Allowed IP or Network', required=True)
    netmask = forms.ChoiceField(choices=NETMASK_CHOICES, label='Netmask', initial=24, required=True)
    priority = forms.IntegerField(label='Priority', required=True, initial=1)
    
    def clean(self):
        cleaned_data = super().clean()
        priority = cleaned_data.get('priority')
        allowed_ip = cleaned_data.get('allowed_ip')
        netmask = cleaned_data.get('netmask')
        if allowed_ip is None:
            raise forms.ValidationError("Please provide a valid IP address.")

        wireguard_network = ipaddress.ip_network(f"{self.current_peer.wireguard_instance.address}/{self.current_peer.wireguard_instance.netmask}", strict=False)

        if priority == 0:
            zero_priority_ips_query = PeerAllowedIP.objects.filter(peer=self.current_peer, priority=0)
            if self.instance:
                zero_priority_ips_query = zero_priority_ips_query.exclude(uuid=self.instance.uuid)
            if zero_priority_ips_query.exists():
                raise forms.ValidationError("A peer can have only one IP with priority zero.")
            
            duplicated_ip = PeerAllowedIP.objects.filter(allowed_ip=allowed_ip)
            if self.instance:
                duplicated_ip = duplicated_ip.exclude(uuid=self.instance.uuid)
            if duplicated_ip.exists():
                raise forms.ValidationError("This IP is already in use by another peer.")
            if ipaddress.ip_address(allowed_ip) not in wireguard_network:
                raise forms.ValidationError("The IP address does not belong to the Peer's WireGuard instance network range. Please check the IP address or change the priority.")
            if str(netmask) != str(32):
                raise forms.ValidationError("The netmask for priority 0 IP must be 32.")
            if self.current_peer.wireguard_instance.address == allowed_ip:
                raise forms.ValidationError("The IP address is the same as the Peer's WireGuard instance address.")
        else:
            if ipaddress.ip_address(allowed_ip) in wireguard_network:
                raise forms.ValidationError("The IP address belongs to the Peer's WireGuard instance network range. Please check the IP address or change use priority 0 instead.")

    class Meta:
        model = PeerAllowedIP
        fields = ['allowed_ip', 'priority', 'netmask']