mirror of
https://github.com/trailofbits/algo.git
synced 2025-09-23 12:15:17 +02:00
be744b16a2
* chore: Conservative dependency updates for security - Update Ansible from 9.1.0 to 9.2.0 (one minor version bump only) - Update Jinja2 to ~3.1.6 to fix CVE-2025-27516 (critical security fix) - Pin netaddr to 1.3.0 (current stable version) This is a minimal, conservative update focused on: 1. Critical security fix for Jinja2 2. Minor ansible update for bug fixes 3. Pinning netaddr to prevent surprises No changes to Ansible collections - keeping them unpinned for now. * fix: Address linter issues (ruff, yamllint, shellcheck) - Fixed ruff configuration by moving linter settings to [tool.ruff.lint] section - Fixed ruff code issues: - Moved imports to top of files (E402) - Removed unused variables or commented them out - Updated string formatting from % to .format() - Replaced dict() calls with literals - Fixed assert False usage in tests - Fixed yamllint issues: - Added missing newlines at end of files - Removed trailing spaces - Added document start markers (---) to YAML files - Fixed 'on:' truthy warnings in GitHub workflows - Fixed shellcheck issues: - Properly quoted variables in shell scripts - Fixed A && B || C pattern with proper if/then/else - Improved FreeBSD rc script quoting All linters now pass without errors related to our code changes. * fix: Additional yamllint fixes for GitHub workflows - Added document start markers (---) to test-effectiveness.yml - Fixed 'on:' truthy warning by quoting as 'on:' - Removed trailing spaces from main.yml - Added missing newline at end of test-effectiveness.yml
44 lines
762 B
Bash
44 lines
762 B
Bash
#!/bin/sh
|
|
|
|
# PROVIDE: wireguard
|
|
# REQUIRE: LOGIN
|
|
# BEFORE: securelevel
|
|
# KEYWORD: shutdown
|
|
|
|
. /etc/rc.subr
|
|
|
|
name="wg"
|
|
rcvar=wg_enable
|
|
|
|
command="/usr/local/bin/wg-quick"
|
|
start_cmd=wg_up
|
|
stop_cmd=wg_down
|
|
status_cmd=wg_status
|
|
pidfile="/var/run/$name.pid"
|
|
load_rc_config "$name"
|
|
|
|
: "${wg_enable=NO}"
|
|
: "${wg_interface=wg0}"
|
|
|
|
wg_up() {
|
|
echo "Starting WireGuard..."
|
|
/usr/sbin/daemon -cS -p "${pidfile}" "${command}" up "${wg_interface}"
|
|
}
|
|
|
|
wg_down() {
|
|
echo "Stopping WireGuard..."
|
|
"${command}" down "${wg_interface}"
|
|
}
|
|
|
|
wg_status () {
|
|
not_running () {
|
|
echo "WireGuard is not running on $wg_interface" && exit 1
|
|
}
|
|
if /usr/local/bin/wg show wg0; then
|
|
echo "WireGuard is running on $wg_interface"
|
|
else
|
|
not_running
|
|
fi
|
|
}
|
|
|
|
run_rc_command "$1"
|