84 lines
1.8 KiB
Bash
84 lines
1.8 KiB
Bash
#!/bin/bash
|
|
set -u
|
|
set -e
|
|
|
|
AddressAwg=10.0.0.1/32 # Adresse VPN Wireguard extremite A
|
|
EndpointA=10.121.38.35 # Adresse extremite A (gwsio avec redirection vers srvlog31)
|
|
PortA=51820 # Port ecoute extremite A
|
|
|
|
AddressBwg=10.0.0.2/32 # Adresse VPN Wireguard extremite B
|
|
EndpointB=172.16.0.95 # Adresse extremite B (ap31-test)
|
|
PortB=51820 # Port ecoute extremite B
|
|
|
|
AddressCwg=10.0.0.3/32 # Adresse VPN Wireguard extremite C
|
|
EndpointC=172.16.0.82 # Adresse extremite C (ap31-prod)
|
|
PortC=51820 # Port ecoute extremite C
|
|
|
|
umask 077 ;
|
|
wg genkey > endpoint-a.key
|
|
wg pubkey < endpoint-a.key > endpoint-a.pub
|
|
|
|
wg genkey > endpoint-b.key
|
|
wg pubkey < endpoint-b.key > endpoint-b.pub
|
|
|
|
wg genkey > endpoint-c.key
|
|
wg pubkey < endpoint-c.key > endpoint-c.pub
|
|
|
|
PKA=$(cat endpoint-a.key)
|
|
pKA=$(cat endpoint-a.pub)
|
|
|
|
PKB=$(cat endpoint-b.key)
|
|
pKB=$(cat endpoint-b.pub)
|
|
|
|
PKC=$(cat endpoint-c.key)
|
|
pKC=$(cat endpoint-c.pub)
|
|
|
|
cat <<FINI > wg0-a.conf
|
|
# local settings for Endpoint A
|
|
[Interface]
|
|
PrivateKey = $PKA
|
|
Address = $AddressAwg
|
|
ListenPort = $PortA
|
|
|
|
# remote settings for Endpoint B
|
|
[Peer]
|
|
PublicKey = $pKB
|
|
Endpoint = ${EndpointB}:$PortB
|
|
AllowedIPs = $AddressBwg
|
|
|
|
# remote settings for Endpoint C
|
|
[Peer]
|
|
PublicKey = $pKC
|
|
Endpoint = ${EndpointC}:$PortC
|
|
AllowedIPs = $AddressCwg
|
|
FINI
|
|
|
|
|
|
cat <<FINI > wg0-b.conf
|
|
# local settings for Endpoint B
|
|
[Interface]
|
|
PrivateKey = $PKB
|
|
Address = $AddressBwg
|
|
ListenPort = $PortB
|
|
|
|
# remote settings for Endpoint A
|
|
[Peer]
|
|
PublicKey = $pKA
|
|
Endpoint = ${EndpointA}:$PortA
|
|
AllowedIPs = $AddressAwg
|
|
FINI
|
|
|
|
cat <<FINI > wg0-c.conf
|
|
# local settings for Endpoint C
|
|
[Interface]
|
|
PrivateKey = $PKC
|
|
Address = $AddressCwg
|
|
ListenPort = $PortC
|
|
|
|
# remote settings for Endpoint A
|
|
[Peer]
|
|
PublicKey = $pKA
|
|
Endpoint = ${EndpointA}:$PortA
|
|
AllowedIPs = $AddressAwg
|
|
FINI
|