69 lines
2.1 KiB
Go
69 lines
2.1 KiB
Go
package params
|
|
|
|
import (
|
|
"fmt"
|
|
"strconv"
|
|
"strings"
|
|
|
|
libparams "github.com/qdm12/golibs/params"
|
|
)
|
|
|
|
// GetFirewall obtains if the firewall should be enabled from the environment variable FIREWALL.
|
|
func (r *reader) GetFirewall() (enabled bool, err error) {
|
|
return r.env.OnOff("FIREWALL", libparams.Default("on"))
|
|
}
|
|
|
|
// GetAllowedVPNInputPorts obtains a list of input ports to allow from the
|
|
// VPN server side in the firewall, from the environment variable FIREWALL_VPN_INPUT_PORTS.
|
|
func (r *reader) GetVPNInputPorts() (ports []uint16, err error) {
|
|
s, err := r.env.Get("FIREWALL_VPN_INPUT_PORTS", libparams.Default(""))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if len(s) == 0 {
|
|
return nil, nil
|
|
}
|
|
portsStr := strings.Split(s, ",")
|
|
ports = make([]uint16, len(portsStr))
|
|
for i := range portsStr {
|
|
portInt, err := strconv.Atoi(portsStr[i])
|
|
if err != nil {
|
|
return nil, fmt.Errorf("VPN input port %q is not valid (%s)", portInt, err)
|
|
} else if portInt <= 0 || portInt > 65535 {
|
|
return nil, fmt.Errorf("VPN input port %d must be between 1 and 65535", portInt)
|
|
}
|
|
ports[i] = uint16(portInt)
|
|
}
|
|
return ports, nil
|
|
}
|
|
|
|
// GetInputPorts obtains a list of input ports to allow through the
|
|
// default interface in the firewall, from the environment variable FIREWALL_INPUT_PORTS.
|
|
func (r *reader) GetInputPorts() (ports []uint16, err error) {
|
|
s, err := r.env.Get("FIREWALL_INPUT_PORTS", libparams.Default(""))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if len(s) == 0 {
|
|
return nil, nil
|
|
}
|
|
portsStr := strings.Split(s, ",")
|
|
ports = make([]uint16, len(portsStr))
|
|
for i := range portsStr {
|
|
portInt, err := strconv.Atoi(portsStr[i])
|
|
if err != nil {
|
|
return nil, fmt.Errorf("Input port %q is not valid (%s)", portInt, err)
|
|
} else if portInt <= 0 || portInt > 65535 {
|
|
return nil, fmt.Errorf("Input port %d must be between 1 and 65535", portInt)
|
|
}
|
|
ports[i] = uint16(portInt)
|
|
}
|
|
return ports, nil
|
|
}
|
|
|
|
// GetFirewallDebug obtains if the firewall should run in debug verbose mode
|
|
// from the environment variable FIREWALL_DEBUG.
|
|
func (r *reader) GetFirewallDebug() (debug bool, err error) {
|
|
return r.env.OnOff("FIREWALL_DEBUG", libparams.Default("off"))
|
|
}
|