punkfairie/install.fairie
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update file run_onchange_after_24-vpn-darwin.tmpl

Browse source
This commit is contained in:
Brian Zalewski 2023-03-31 06:03:34 +00:00
parent b7c76af9c1
commit 75e7859f65
1 changed files with 24 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
home/.chezmoiscripts/universal/run_onchange_after_24-vpn-darwin.tmpl
View file

@ -1,13 +1,31 @@
{{- if (eq .host.distro.family "darwin") -}} {{- if (eq .host.distro.family "darwin") -}}
#!/usr/bin/env bash #!/usr/bin/env bash
# @file home/.chezmoiscripts/universal/run_onchange_after_26-vpn-darwin.sh.tmpl
# @brief Installs WireGuard VPN profiles on macOS devices
# @description
# This script installs WireGuard VPN profiles on macOS. It scans `${XDG_CONFIG_HOME:-$HOME/.config}/vpn` for all the `*.conf` files
# and then copies those profiles to `/etc/wireguard`. It also performs a couple preparation tasks like ensuring the target
# WireGuard system configuration file directory exists and is assigned the proper permissions.
#
# ## Creating VPN Profiles
#
# More details on embedding your VPN profiles into your Install Doctor fork can be found by reading the [Secrets documentation](https://install.doctor/docs/customization/secrets#vpn-profiles).
#
# ## TODO
#
# * Populate Tunnelblick on macOS using the VPN profiles located in `${XDG_CONFIG_HOME:-$HOME/.config}/vpn`
# * For the Tunnelblick integration, ensure the username / password is populated from the `OVPN_USERNAME` and `OVPN_PASSWORD` variables
#
# ## Links
#
# * [`run_onchange_after_24-vpn-darwin.sh.tmpl`](https://github.com/megabyte-labs/install.doctor/blob/master/home/.chezmoiscripts/universal/run_onchange_after_24-vpn-darwin.sh.tmpl)
# * [VPN profile folder](https://github.com/megabyte-labs/install.doctor/blob/master/home/dot_config/vpn)
# * [VPN profile documentation](https://install.doctor/docs/customization/secrets#vpn-profiles)
{{ includeTemplate "universal/profile" }} {{ includeTemplate "universal/profile" }}
{{ includeTemplate "universal/logg" }} {{ includeTemplate "universal/logg" }}
# TODO - Populate Tunnelblick on macOS using the .ovpn profiles located in $HOME/.config/vpn # @description Backs up previous network settings to `/Library/Preferences/com.apple.networkextension.plist.old` before applying new VPN profiles
# along with the secrets for the protonVPN OpenVPN (check vpn-linux.tmpl)
### Backup previous network settings
if [ -f /Library/Preferences/com.apple.networkextension.plist ]; then if [ -f /Library/Preferences/com.apple.networkextension.plist ]; then
logg info 'Backing up /Library/Preferences/com.apple.networkextension.plist to /Library/Preferences/com.apple.networkextension.plist.old' logg info 'Backing up /Library/Preferences/com.apple.networkextension.plist to /Library/Preferences/com.apple.networkextension.plist.old'
sudo cp -f /Library/Preferences/com.apple.networkextension.plist /Library/Preferences/com.apple.networkextension.plist.old sudo cp -f /Library/Preferences/com.apple.networkextension.plist /Library/Preferences/com.apple.networkextension.plist.old
@ -15,14 +33,14 @@ else
logg info 'The /Library/Preferences/com.apple.networkextension.plist file does not exist yet' logg info 'The /Library/Preferences/com.apple.networkextension.plist file does not exist yet'
fi fi
### Ensure /etc/wireguard exists # @description Ensures the `/etc/wireguard` directory exists and has the lowest possible permission-level
if [ ! -d /etc/wireguard ]; then if [ ! -d /etc/wireguard ]; then
logg info 'Creating `/etc/wireguard` since it does not exist yet' logg info 'Creating `/etc/wireguard` since it does not exist yet'
sudo mkdir -p /etc/wireguard sudo mkdir -p /etc/wireguard
sudo chmod 600 /etc/wireguard sudo chmod 600 /etc/wireguard
fi fi
### Add the WireGuard configurations # @description Cycles through the `*.conf` files in `${XDG_CONFIG_HOME:-$HOME/.config}/vpn` and adds them to the `/etc/wireguard` folder
find "${XDG_CONFIG_HOME:-$HOME/.config}/vpn" -mindepth 1 -maxdepth 1 -type f -name "*.conf" | while read WG_CONF; do find "${XDG_CONFIG_HOME:-$HOME/.config}/vpn" -mindepth 1 -maxdepth 1 -type f -name "*.conf" | while read WG_CONF; do
WG_FILE="$(basename "$WG_CONF")" WG_FILE="$(basename "$WG_CONF")"
logg info 'Adding `'"$WG_FILE"'` to /etc/wireguard' logg info 'Adding `'"$WG_FILE"'` to /etc/wireguard'