2023-09-27 00:40:01 +05:00
|
|
|
#!/bin/bash
|
|
|
|
|
|
|
|
|
|
# This scripts copied from Amnezia client to Docker container to /opt/amnezia and launched every time container starts
|
|
|
|
|
|
|
|
|
|
echo "Container startup"
|
|
|
|
|
#ifconfig eth0:0 $SERVER_IP_ADDRESS netmask 255.255.255.255 up
|
|
|
|
|
|
|
|
|
|
# kill daemons in case of restart
|
2023-10-06 17:19:44 +05:00
|
|
|
wg-quick down /opt/amnezia/awg/wg0.conf
|
2023-09-27 00:40:01 +05:00
|
|
|
|
2023-10-01 21:43:30 +05:00
|
|
|
# start daemons if configured
|
2023-10-06 17:19:44 +05:00
|
|
|
if [ -f /opt/amnezia/awg/wg0.conf ]; then (wg-quick up /opt/amnezia/awg/wg0.conf); fi
|
2023-09-27 00:40:01 +05:00
|
|
|
|
|
|
|
|
# Allow traffic on the TUN interface.
|
|
|
|
|
iptables -A INPUT -i wg0 -j ACCEPT
|
|
|
|
|
iptables -A FORWARD -i wg0 -j ACCEPT
|
|
|
|
|
iptables -A OUTPUT -o wg0 -j ACCEPT
|
|
|
|
|
|
|
|
|
|
# Allow forwarding traffic only from the VPN.
|
2025-01-02 08:07:12 +01:00
|
|
|
iptables -A FORWARD -i wg0 -o eth0 -s $AWG_SUBNET_IP/$WIREGUARD_SUBNET_CIDR -j ACCEPT
|
|
|
|
|
iptables -A FORWARD -i wg0 -o eth1 -s $AWG_SUBNET_IP/$WIREGUARD_SUBNET_CIDR -j ACCEPT
|
2023-09-27 00:40:01 +05:00
|
|
|
|
|
|
|
|
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
|
|
|
|
|
|
2025-01-02 08:07:12 +01:00
|
|
|
iptables -t nat -A POSTROUTING -s $AWG_SUBNET_IP/$WIREGUARD_SUBNET_CIDR -o eth0 -j MASQUERADE
|
|
|
|
|
iptables -t nat -A POSTROUTING -s $AWG_SUBNET_IP/$WIREGUARD_SUBNET_CIDR -o eth1 -j MASQUERADE
|
2023-09-27 00:40:01 +05:00
|
|
|
|
|
|
|
|
tail -f /dev/null
|
