qdm12

Wireguard and iptables restrictions for multiple users

If you don't know what Wireguard is, well, you should. It's fast, easy to setup and highly configurable. We will configure Wireguard for multiple users with various restrictions using iptables.

Assumptions

This should fit most setups (not mine though 😉)

qdm12

Wireguard setup for LAN access

Assumptions

• The network 192.168.1.0/24 is your LAN
• Your Ubuntu server is on your LAN at 192.168.1.10, through the network interface eth0
• The network 192.168.5.0/24 is non existent
• Your LAN DNS is at 192.168.1.1

qdm12

package main

import (
	"bytes"
	"context"
	"crypto/tls"
	"errors"
	"fmt"
	"io/ioutil"
	"log"

qdm12

Contents

1. Presenting the potato code, part 1
2. Using mockgen from golang/mock
3. //go:generate commands for mocks generation
4. CI check for updated mocks, see mocks.yml
5. Testing CutAndFry with golang/mock, see potato_test.go part 1
6. Mock calls order, see previousCall *gomock.Call
7. Comparing with golang/mock with mockery, see potato_mockery_test.go
8. Presenting the potato code, part 2

qdm12

package main

import (
	"crypto/rand"
	"encoding/binary"
	"fmt"
	"hash/maphash"
	mathrand "math/rand"
	"runtime"
	"sync"

qdm12

package main

import (
	"context"
	"fmt"
	"io"
	"log"
	"net"
	"net/http"
	"net/smtp"

qdm12

FROM debian:buster-slim
WORKDIR /domoticz
EXPOSE 8080/tcp 443/tcp 6144
ENTRYPOINT [ "/domoticz/domoticz" ]
RUN apt-get update -y && \
    apt-get install -y wget libusb-0.1-4 libcurl3-gnutls && \
    wget -q -O domoticz.tgz https://releases.domoticz.com/releases/release/domoticz_linux_x86_64.tgz && \
    tar -xf domoticz.tgz && \
    rm domoticz.tgz *.txt

qdm12

name: Buildx release
on:
  release:
    types: [published]
    paths-ignore:
      - .github/workflows/buildx-latest.yml
      - README.md
jobs:
  buildx:

qdm12

name: Buildx latest
on:
  push:
    branches: [master]
    paths-ignore:
      - .github/workflows/buildx-release.yml
      - README.md
jobs:
  buildx:
    runs-on: ubuntu-latest

qdm12

name: Buildx latest
on:
  push:
    branches: [master]
    paths-ignore:
      - .github/workflows/buildx-release.yml
      - README.md
jobs:
  buildx:
    runs-on: ubuntu-latest