simono41/docker-wireguard
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Only set ipv6 killswitch if ipv6 interface exists

Browse source
This commit is contained in:
bobbypage 2020-09-13 01:07:06 +00:00
parent ac2b0180ae
commit c563bc848e
1 changed files with 7 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
entrypoint.sh
View file

@ -3,7 +3,7 @@
set -e
configs=`find /etc/wireguard -type f -printf "%f\n"`
if [[ -z $configs ]]; then
if [[ -z "$configs" ]]; then
echo "No configuration files found in /etc/wireguard" >&2
exit 1
fi
@ -18,8 +18,12 @@ docker_network_rule=$([ ! -z "$docker_network" ] && echo "! -d $docker_network"
iptables -I OUTPUT ! -o $interface -m mark ! --mark $(wg show $interface fwmark) -m addrtype ! --dst-type LOCAL $docker_network_rule -j REJECT
docker6_network="$(ip -o addr show dev eth0 | awk '$3 == "inet6" {print $4}')"
docker6_network_rule=$([ ! -z "$docker6_network" ] && echo "! -d $docker6_network" || echo "")
ip6tables -I OUTPUT ! -o $interface -m mark ! --mark $(wg show $interface fwmark) -m addrtype ! --dst-type LOCAL $docker6_network_rule -j REJECT
if [[ -z "$docker6_network" ]]; then
echo "Skipping ipv6 killswitch setup since ipv6 interface was not found..." >&2
else
docker6_network_rule=$([ ! -z "$docker6_network" ] && echo "! -d $docker6_network" || echo "")
ip6tables -I OUTPUT ! -o $interface -m mark ! --mark $(wg show $interface fwmark) -m addrtype ! --dst-type LOCAL $docker6_network_rule -j REJECT
fi
shutdown () {
wg-quick down $interface