Tobias/PiCopy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Hotspot-Routing-Regeln für WireGuard hinzugefügt und entfernt

Browse Source
This commit is contained in:
Tobias Leuschner
2026-05-09 12:22:43 +02:00
parent 465b5263ac
commit 8fbdb6aa8c
1 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
app.py
View File

@@ -327,6 +327,27 @@ def wg_update_state():
error=None, has_config=has_conf) error=None, has_config=has_conf)
_AP_SUBNET = '10.42.0.0/24' # NetworkManager Hotspot-Standard
def _wg_add_hotspot_routes():
"""Hotspot-Subnet vom WireGuard-Tunnel ausschließen (höhere Priorität als wg-quick-Regeln)."""
subprocess.run(['ip', 'rule', 'add', 'from', _AP_SUBNET,
'table', 'main', 'priority', '100'], capture_output=True)
subprocess.run(['ip', 'rule', 'add', 'to', _AP_SUBNET,
'table', 'main', 'priority', '101'], capture_output=True)
log.info('Hotspot-Routing-Regeln gesetzt (Prio 100/101)')
def _wg_remove_hotspot_routes():
"""Hotspot-Routing-Regeln wieder entfernen."""
subprocess.run(['ip', 'rule', 'del', 'from', _AP_SUBNET,
'table', 'main', 'priority', '100'], capture_output=True)
subprocess.run(['ip', 'rule', 'del', 'to', _AP_SUBNET,
'table', 'main', 'priority', '101'], capture_output=True)
log.info('Hotspot-Routing-Regeln entfernt')
def wg_connect(): def wg_connect():
if not WG_CONF.exists(): if not WG_CONF.exists():
with wg_lock: with wg_lock:
@@ -336,6 +357,7 @@ def wg_connect():
capture_output=True, text=True, timeout=30) capture_output=True, text=True, timeout=30)
if r.returncode == 0: if r.returncode == 0:
time.sleep(1) time.sleep(1)
_wg_add_hotspot_routes()
wg_update_state() wg_update_state()
log.info('WireGuard verbunden') log.info('WireGuard verbunden')
return True return True
@@ -352,6 +374,7 @@ def wg_connect():
def wg_disconnect(): def wg_disconnect():
_wg_remove_hotspot_routes()
r = subprocess.run(['wg-quick', 'down', WG_IFACE], r = subprocess.run(['wg-quick', 'down', WG_IFACE],
capture_output=True, text=True, timeout=15) capture_output=True, text=True, timeout=15)
with wg_lock: with wg_lock: