bain/homelab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

vpn: rename from dsnet; add dnsmasq config

Browse source
This commit is contained in:
bain 2023-01-01 03:10:28 +01:00
parent 9f2d9fe9bb
commit 05ff1b18f7
2 changed files with 23 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

0
scripts/dsnet/dsnet.service → scripts/vpn/dsnet.service
View file

24
scripts/dsnet/script.sh → scripts/vpn/script.sh
View file

@ -3,10 +3,11 @@ set -euo pipefail
source "$HL_LIB"
_assert_vars HL_TIMEZONE HL_DOMAIN;
_assert_vars HL_TIMEZONE HL_DOMAIN HL_DNS_SERVERS_SPACE_SEP;
_ch_001-install_wireguard() {
sudo apt-get install -y wireguard;
sudo modprobe wireguard;
}
_ch_002-install_dsnet() {
@ -40,4 +41,25 @@ _ch_006-run_service() {
sudo systemctl enable --now dsnet.service
}
_ch_007-install_dnsmasq() {
sudo apt-get install -y dnsmasq
}
_ch_008-configure_dnsmasq() {
# dynamically acquire ip address of the wireguard interface
DSNET_IP=$(ip -f inet addr show dsnet | awk '/inet/ {print $2}' | cut -d / -f 1)
# listen only for queries from inside the VPN and respond with the VPN ip address
{
echo "# dsnet intra-VPN DNS resolver"
echo "listen-address=$DSNET_IP"
for serv in $HL_DNS_SERVERS_SPACE_SEP; do
echo "server=$serv"
done
echo "address=/$HL_DOMAIN/$DSNET_IP"
} | sudo tee /etc/dnsmasq.d/dnsmasq-vpn
sudo systemctl reload dnsmasq.service
}
_run_checkpoints