2020-03-03 22:28:06 +01:00
|
|
|
dsnet is a simple tool to manage a centralised wireguard VPN. Think wg-quick
|
|
|
|
|
but quicker.
|
2020-03-02 01:48:59 +01:00
|
|
|
|
2020-03-02 19:15:34 +01:00
|
|
|
Usage: dsnet <cmd>
|
2020-03-02 01:48:59 +01:00
|
|
|
|
2020-03-02 19:15:34 +01:00
|
|
|
Available commands:
|
2020-03-02 01:48:59 +01:00
|
|
|
|
2020-03-07 19:59:34 +01:00
|
|
|
init : Create /etc/dsnetconfig.json containing default configuration + new keys without loading. Edit to taste.
|
|
|
|
|
add : Add a new peer + sync
|
|
|
|
|
up : Create the interface, run pre/post up, sync
|
|
|
|
|
report : Generate a JSON status report to the location configured in /etc/dsnetconfig.json.
|
|
|
|
|
remove : Remove a peer by hostname provided as argument + sync
|
|
|
|
|
down : Destroy the interface, run pre/post down
|
|
|
|
|
sync : Update wireguard configuration from /etc/dsnetconfig.json after validating
|
2020-03-02 01:48:59 +01:00
|
|
|
|
|
|
|
|
|
2020-03-07 19:59:34 +01:00
|
|
|
Quick start -- install wireguard and dsnet, then:
|
|
|
|
|
|
|
|
|
|
sudo dsnet init
|
|
|
|
|
sudo dsnet up
|
|
|
|
|
# edit /etc/dsnetconfig.json to taste
|
|
|
|
|
dsnet add banana > dsnet-banana.conf
|
|
|
|
|
dsnet add apple > dsnet-apple.conf
|
|
|
|
|
|
|
|
|
|
Copy the configuration file to your devices and connect!
|
|
|
|
|
|
|
|
|
|
Dsnet assumes a DNS server is running on the server at the moment.
|
2020-02-09 22:02:23 +01:00
|
|
|
|
2020-03-02 19:15:34 +01:00
|
|
|
To send configurations, ffsend (with separately transferred password) or a local QR code generator may be used.
|
2020-03-02 20:57:52 +01:00
|
|
|
|
|
|
|
|
TODO after first release:
|
|
|
|
|
|
|
|
|
|
* Hooks for adding routes/ IPtables forwarding rules
|
2020-03-07 19:59:34 +01:00
|
|
|
* Route entire internet option
|
2020-03-08 20:08:19 +01:00
|
|
|
* Support for additional subnets in peer config (with routes) in separate networks section in report
|
2020-03-02 20:57:52 +01:00
|
|
|
* Peer endpoint support
|
2020-03-08 20:08:19 +01:00
|
|
|
* Decide what to do with assumed default DNS server
|
