awg-manager/shm_actions_script.sh

#!/bin/bash

set -e

EVENT="{{ event_name }}"
AWG_MANAGER="/etc/amnezia/amneziawg/awg-manager.sh"
SESSION_ID="{{ user.gen_session.id }}"
API_URL="{{ config.api.url }}"
CURL="curl"

echo "EVENT=$EVENT"

case $EVENT in
    INIT)
        SERVER_HOST="{{ server.settings.host_name }}"
        SERVER_INTERFACE="{{ server.settings.host_interface }}"
        if [[ -z "$SERVER_INTERFACE" ]]; then
            SERVER_INTERFACE=$(ip route | awk '/default/ {print $5; exit}')
        fi
        if [ -z $SERVER_HOST ]; then
            SERVER_HOST="{{ server.settings.host }}"
        fi
        
        echo "Install required packages"
        apt update
        apt install -y \
            iproute2 \
            iptables \
            curl \
            wget \
            git \
            build-essential \
            make
            
        echo "Check domain: $API_URL"
        HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" $API_URL/shm/v1/test)
        if [ $HTTP_CODE -ne '200' ]; then
            echo "ERROR: incorrect API URL: $API_URL"
            echo "Got status: $HTTP_CODE"
            exit 1
        fi
        mkdir -p /opt/go
        cd /opt/go
        wget https://go.dev/dl/go1.22.0.linux-amd64.tar.gz
        rm -rf /usr/local/go && tar -C /usr/local -xzf go1.22.0.linux-amd64.tar.gz
        echo "export PATH=$PATH:/usr/local/go/bin" >> /etc/profile
        source $HOME/.profile
        if ! command -v go &> /dev/null; then
            cp /usr/local/go/bin/go /usr/bin && cp /usr/local/go/bin/gofmt /usr/bin
        fi

        git clone https://github.com/amnezia-vpn/amneziawg-go.git /opt/amnezia-go
        cd /opt/amnezia-go
        make
        sleep 1
        cp /opt/amnezia-go/amneziawg-go /usr/bin

        git clone https://github.com/amnezia-vpn/amneziawg-tools.git /opt/amnezia-tools
        cd /opt/amnezia-tools/src
        make
        make install
        sleep 1

        echo "Download awg-manager.sh"
        cd /etc/wireguard
        $CURL -s https://raw.githubusercontent.com/bkeenke/awg-manager/master/awg-manager.sh > $AWG_MANAGER

        echo "Init server"
        chmod 700 $AWG_MANAGER
        if [ $SERVER_INTERFACE ]; then
            $AWG_MANAGER -i -s $SERVER_HOST -I $SERVER_INTERFACE
        else
            $AWG_MANAGER -i -s $SERVER_HOST
        fi
        ;;
    CREATE)
        echo "Create new user"
        USER_CFG=$($AWG_MANAGER -u "{{ us.id }}" -c -p)

        echo "Upload user key to SHM"
        $CURL -s -XPUT \
            -H "session-id: $SESSION_ID" \
            -H "Content-Type: text/plain" \
            $API_URL/shm/v1/storage/manage/vpn{{ us.id }} \
            --data-binary "$USER_CFG"
        echo "done"
        ;;
    ACTIVATE)
        echo "Activate user"
        $AWG_MANAGER -u "{{ us.id }}" -U
        echo "done"
        ;;
    BLOCK)
        echo "Block user"
        $AWG_MANAGER -u "{{ us.id }}" -L
        echo "done"
        ;;
    REMOVE)
        echo "Remove user"
        $AWG_MANAGER -u "{{ us.id }}" -d

        echo "Remove user key from SHM"
        $CURL -s -XDELETE \
            -H "session-id: $SESSION_ID" \
            $API_URL/shm/v1/storage/manage/vpn{{ us.id }}
        echo "done"
        ;;
    *)
        echo "Unknown event: $EVENT. Exit."
        exit 0
        ;;
esac