YunoHost-Apps/hotspot_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/hotspot_ynh.git synced 2024-09-03 19:25:53 +02:00
Code Issues Activity Actions

openvpn client reload only nat rules instead of whole hotspot

Browse source
This commit is contained in:
HgO 2023-11-18 19:18:15 +01:00
parent 29d48e1f0a
commit b5cd8bd1a3
2 changed files with 30 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
conf/openvpn_90-hotspot
View file

@ -1,3 +1,29 @@
#!/bin/bash
systemctl restart __SERVICE_NAME__
source /usr/share/yunohost/helpers
is_nat_set() {
local gateway_interface=${1}
iptables -w -nvt nat -L POSTROUTING | grep MASQUERADE | grep -q "${gateway_interface}"
}
unset_nat() {
local gateway_interface=${1}
iptables -w -t nat -D POSTROUTING -o "${gateway_interface}" -j MASQUERADE
}
set_nat() {
local gateway_interface=${1}
iptables -w -t nat -A POSTROUTING -o "${gateway_interface}" -j MASQUERADE
}
old_gateway_interface=$(ynh_app_setting_get --app=$app --key=gateway_interface)
new_gateway_interface=$(ip route get 1.2.3.4 | awk '{ print $5; }')
if [[ -n "$old_gateway_interface" ]] && [[ "$old_gateway_interface" != "$new_gateway_interface" ]] && is_nat_set "$old_gateway_interface"; then
unset_nat "${old_gateway_interface}"
fi
set_nat "${new_gateway_interface}"
ynh_app_setting_set --app=$app --key=gateway_interface --value="${new_gateway_interface}"

6
conf/ynh-hotspot
View file

@ -258,7 +258,7 @@ start)
exit 1
fi
echo "[hotspot] Starting..."
echo "[$app] Starting..."
touch /tmp/.${service_name}-started
# Check old state of the ipv4 NAT settings
@ -295,13 +295,13 @@ start)
start_dhcpd
# Update dynamic settings
ynh_app_setting_set hotspot gateway_interface "${new_gateway_interface}"
ynh_app_setting_set --app=$app --key=gateway_interface --value="${new_gateway_interface}"
# Regen-conf dnsmasq to enable dns resolution on dnsmasq for the new interface
yunohost tools regen-conf dnsmasq
;;
stop)
echo "[hotspot] Stopping..."
echo "[$app] Stopping..."
rm -f /tmp/.${service_name}-started
if ! is_other_hostapd_running; then