pfSense

<?php

/*

 * vpn_wg.php

 *

 * part of pfSense (https://www.pfsense.org)

 * Copyright (c) 2021 Rubicon Communications, LLC (Netgate)

 * All rights reserved.

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 *

 * http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */

##|+PRIV

##|*IDENT=page-vpn-wg

##|*NAME=VPN: WireGuard

##|*DESCR=Allow access to the 'VPN: WireGuard' page.

##|*MATCH=vpn_wg.php*

##|-PRIV

require_once("guiconfig.inc");

require_once("functions.inc");

require_once("wg.inc");

init_config_arr(array('wireguard', 'tunnel'));

$tunnels = &$config['wireguard']['tunnel'];

$pgtitle = array(gettext("VPN"), gettext("WireGuard"), gettext("Tunnels"));

$pglinks = array("", "@self", "@self");

$shortcut_section = "wireguard";

include("head.inc");

// Delete a tunnel?

if (array_key_exists('delidx', $_POST)) {

	deleteTunnel($_POST['delidx']);

	header("Location: vpn_wg.php");

}

?>

<form name="mainform" method="post">

<?php

	if (count($tunnels) == 0):

		print_info_box(gettext('No WireGuard tunnels have been configured. Click the "Add tunnel" button below to create one.'), 'warning', false);

	else:

?>

	<div class="panel panel-default">

		<div class="panel-heading"><h2 class="panel-title"><?=gettext('WireGuard Tunnels')?></h2></div>

		<div class="panel-body table-responsive">

			<table class="table table-striped table-hover">

				<thead>

					<tr>

						<th class="peer-entries"></th>

						<th><?=gettext("Name")?></th>

						<th><?=gettext("Description")?></th>

						<th><?=gettext("Address")?></th>

						<th><?=gettext("Port")?></th>

						<th><?=gettext("# Peers")?></th>

						<th><?=gettext("Actions")?></th>

					</tr>

				</thead>

				<tbody>

<?php

		$i = 0;

		foreach ($tunnels as $tunnel):

			$entryStatus = ($tunnel['enabled'] == 'yes') ? 'enabled':'disabled';

			if (!$tunnel['peers'] || !is_array($tunnel['peers'])) {

				$tunnel['peers'] = array();

			}

			if (!$tunnel['peers']['wgpeer'] || !is_array($tunnel['peers']['wgpeer'])) {

				$tunnel['peers']['wgpeer'] = array();

			}

?>

					<tr id="fr<?=$i?>" id="frd<?=$i?>" class="<?= $entryStatus ?>">

						<td class="peer-entries"><?=gettext('Interface')?></td>

						<td><?=$tunnel['name']?></td>

						<td><?=$tunnel['descr']?></td>

						<td><?=$tunnel['interface']['address']?></td>

						<td><?=$tunnel['interface']['listenport']?></td>

						<td><?=count($tunnel['peers']['wgpeer'])?></td>

						<td style="cursor: pointer;">

							<a class="fa fa-pencil" href="vpn_wg_edit.php?index=<?=$i?>" title="<?=gettext("Edit tunnel"); ?>"></a>

							<a class="fa fa-trash text-danger" id="Xdel_<?=$i?>" title="<?=gettext('Delete tunnel'); ?>"></a>

						</td>

					</tr>

					<tr class="peer-entries" style="background-color:#ccf2ff;"> <!-- Move to pfSense.css -->

						<td>Peers</td>

<?php

			if (count($tunnel['peers']['wgpeer']) > 0):

?>

						<td colspan="6">

							<table class="table table-hover" style="background-color:#ccf2ff;"> <!-- Move to pfSense.css -->

								<thead>

									<tr>

										<th>Description</th>

										<th>Endpoint</th>

										<th>Allowed IPs</th>

										<th>Public key</th>

									</tr>

								</thead>

								<tbody>

<?php

				foreach ($tunnel['peers']['wgpeer'] as $peer):

?>

									<tr>

										<td><?=$peer['descr']?></td>

										<td><?=$peer['endpoint']?>:<?=$peer['port']?></td>

										<td><?=$peer['allowedips']?></td>

										<td><?=$peer['publickey']?></td>

									</tr>

<?php

				endforeach;

?>

								</tbody>

							</table>

						</td>

<?php

			else:

				print('<td colspan="6">' . gettext("No peers have been configured") . '</td>');

			endif;

?>

					</tr>

<?php

			$i++;

		endforeach;	 // $tunnelsa

?>

				</tbody>

			</table>

		</div>

	</div>

<?php

		$section = new Form_Section('Firewall keys');

		$section->addClass('fwkeys');

		$section->addInput(new Form_Input(

			'pubkey',

			'Public key',

			'',

			''

		))->setReadonly();

		$section->addInput(new Form_Input(

			'privkey',

			'Private key',

			'',

			''

		))->setReadonly();

		print($section);

	endif;

?>

	<nav class="action-buttons">

		<a href="#" class="btn btn-info btn-sm" id="showpeers">

			<i class="fa fa-info icon-embed-btn"></i>

			<?=gettext("Show peers")?>

		</a>

		<a href="vpn_wg_edit.php?index=<?=nextFreeWGInterfaceName();?>" class="btn btn-success btn-sm">

			<i class="fa fa-plus icon-embed-btn"></i>

			<?=gettext("Add Tunnel")?>

		</a>

	</nav>

</form>

<!-- Simple form that is submitted on tunnel delete -->

<form name="delform" id="delform" method="post">

	<input id="delidx" name="delidx" type="hidden" />

</form>

<script type="text/javascript">

//<![CDATA[

events.push(function() {

	var peershidden = true;

	var keyshidden = true;

	hideClass('peer-entries', peershidden);

	hideClass('fwkeys', keyshidden);

	// Toggle peer visibility

	$('#showpeers').click(function () {

		peershidden = !peershidden;

		hideClass('peer-entries', peershidden);

	})

	// Delete tunnel

	$('[id^=Xdel_]').click(function (event) {

		var idx = event.target.id.split('_')[1];

		$('#delidx').val(idx);  // Set the id of the tunnel

		$('#delform').submit(); // Submit the form

	});

});

//]]>

</script>

<?php

include("foot.inc");