mirror of
https://github.com/eduardogsilva/wireguard_webadmin.git
synced 2025-04-19 08:55:12 +00:00
71 lines
3.7 KiB
Python
71 lines
3.7 KiB
Python
from django import forms
|
|
from wireguard.models import Peer, PeerAllowedIP, NETMASK_CHOICES
|
|
import ipaddress
|
|
|
|
|
|
class PeerForm(forms.ModelForm):
|
|
name = forms.CharField(label='Name', required=False)
|
|
public_key = forms.CharField(label='Public Key', required=True)
|
|
private_key = forms.CharField(label='Private Key', required=False)
|
|
pre_shared_key = forms.CharField(label='Pre-Shared Key', required=True)
|
|
persistent_keepalive = forms.IntegerField(label='Persistent Keepalive', required=True)
|
|
|
|
class Meta:
|
|
model = Peer
|
|
fields = ['name', 'public_key', 'private_key', 'pre_shared_key', 'persistent_keepalive']
|
|
|
|
|
|
class PeerAllowedIPForm(forms.ModelForm):
|
|
def __init__(self, *args, **kwargs):
|
|
current_peer = kwargs.pop('current_peer', None)
|
|
config_file = kwargs.pop('config_file', None)
|
|
super().__init__(*args, **kwargs)
|
|
self.current_peer = current_peer
|
|
self.config_file = config_file
|
|
|
|
allowed_ip = forms.GenericIPAddressField(label='Allowed IP or Network', required=True)
|
|
netmask = forms.ChoiceField(choices=NETMASK_CHOICES, label='Netmask', initial=24, required=True)
|
|
priority = forms.IntegerField(label='Priority', required=True, initial=1)
|
|
|
|
def clean(self):
|
|
cleaned_data = super().clean()
|
|
priority = cleaned_data.get('priority')
|
|
allowed_ip = cleaned_data.get('allowed_ip')
|
|
netmask = cleaned_data.get('netmask')
|
|
if allowed_ip is None:
|
|
raise forms.ValidationError("Please provide a valid IP address.")
|
|
|
|
if self.config_file == 'server':
|
|
wireguard_network = ipaddress.ip_network(f"{self.current_peer.wireguard_instance.address}/{self.current_peer.wireguard_instance.netmask}", strict=False)
|
|
if priority == 0:
|
|
zero_priority_ips_query = PeerAllowedIP.objects.filter(peer=self.current_peer, config_file='server', priority=0)
|
|
if self.instance:
|
|
zero_priority_ips_query = zero_priority_ips_query.exclude(uuid=self.instance.uuid)
|
|
if zero_priority_ips_query.exists():
|
|
raise forms.ValidationError("A peer can have only one IP with priority zero.")
|
|
|
|
duplicated_ip = PeerAllowedIP.objects.filter(config_file='server', allowed_ip=allowed_ip)
|
|
if self.instance:
|
|
duplicated_ip = duplicated_ip.exclude(uuid=self.instance.uuid)
|
|
if duplicated_ip.exists():
|
|
raise forms.ValidationError("This IP is already in use by another peer.")
|
|
if ipaddress.ip_address(allowed_ip) not in wireguard_network:
|
|
raise forms.ValidationError("The IP address does not belong to the Peer's WireGuard instance network range. Please check the IP address or change the priority.")
|
|
if str(netmask) != str(32):
|
|
raise forms.ValidationError("The netmask for priority 0 IP must be 32.")
|
|
if self.current_peer.wireguard_instance.address == allowed_ip:
|
|
raise forms.ValidationError("The IP address is the same as the Peer's WireGuard instance address.")
|
|
else:
|
|
if ipaddress.ip_address(allowed_ip) in wireguard_network:
|
|
raise forms.ValidationError("The IP address belongs to the Peer's WireGuard instance network range. Please check the IP address or change use priority 0 instead.")
|
|
elif self.config_file == 'client':
|
|
if priority < 1:
|
|
raise forms.ValidationError("Priority must be greater than or equal to 1")
|
|
else:
|
|
raise forms.ValidationError('Invalid config file')
|
|
|
|
class Meta:
|
|
model = PeerAllowedIP
|
|
fields = ['allowed_ip', 'priority', 'netmask']
|
|
|