use crate::*; use db::DatabaseCidr; use dialoguer::{theme::ColorfulTheme, Input}; use indoc::printdoc; use rusqlite::{params, Connection}; use shared::{ prompts::{self, hostname_validator}, CidrContents, PeerContents, PERSISTENT_KEEPALIVE_INTERVAL_SECS, }; use wgctrl::KeyPair; fn create_database>( database_path: P, ) -> Result> { let conn = Connection::open(&database_path)?; conn.pragma_update(None, "foreign_keys", &1)?; conn.execute(db::peer::CREATE_TABLE_SQL, params![])?; conn.execute(db::association::CREATE_TABLE_SQL, params![])?; conn.execute(db::cidr::CREATE_TABLE_SQL, params![])?; Ok(conn) } struct DbInitData { root_cidr_name: String, root_cidr: IpNetwork, server_cidr: IpNetwork, our_ip: IpAddr, public_key_base64: String, endpoint: SocketAddr, } fn populate_database(conn: &Connection, db_init_data: DbInitData) -> Result<(), Error> { const SERVER_NAME: &str = "innernet-server"; let root_cidr = DatabaseCidr::create( &conn, CidrContents { name: db_init_data.root_cidr_name.clone(), cidr: db_init_data.root_cidr, parent: None, }, ) .map_err(|_| "failed to create root CIDR".to_string())?; let server_cidr = DatabaseCidr::create( &conn, CidrContents { name: SERVER_NAME.into(), cidr: db_init_data.server_cidr, parent: Some(root_cidr.id), }, ) .map_err(|_| "failed to create innernet-server CIDR".to_string())?; let _me = DatabasePeer::create( &conn, PeerContents { name: SERVER_NAME.into(), ip: db_init_data.our_ip, cidr_id: server_cidr.id, public_key: db_init_data.public_key_base64, endpoint: Some(db_init_data.endpoint), is_admin: true, is_disabled: false, is_redeemed: true, persistent_keepalive_interval: Some(PERSISTENT_KEEPALIVE_INTERVAL_SECS), }, ) .map_err(|_| "failed to create innernet peer.".to_string())?; Ok(()) } pub fn init_wizard(conf: &ServerConfig) -> Result<(), Error> { let theme = ColorfulTheme::default(); shared::ensure_dirs_exist(&[conf.config_dir(), conf.database_dir()]).map_err(|_| { format!( "Failed to create config and database directories {}", "(are you not running as root?)".bold() ) })?; let (name, root_cidr) = conf.root_cidr.clone().unwrap_or_else(|| { println!("Please specify a root CIDR, which will define the entire network."); let name: String = Input::with_theme(&theme) .with_prompt("Network name") .validate_with(hostname_validator) .interact() .map_err(|_| println!("failed to get name.")) .unwrap(); let root_cidr: IpNetwork = Input::with_theme(&theme) .with_prompt("Network CIDR") .with_initial_text("10.42.0.0/16") .interact() .map_err(|_| println!("failed to get cidr.")) .unwrap(); (name, root_cidr) }); // This probably won't error because of the `hostname_validator` regex. let name = name.parse()?; let endpoint: SocketAddr = conf.endpoint.unwrap_or_else(|| { prompts::ask_endpoint() .map_err(|_| println!("failed to get endpoint.")) .unwrap() }); let listen_port: u16 = conf.listen_port.unwrap_or_else(|| { Input::with_theme(&theme) .with_prompt("Listen port") .default(51820) .interact() .map_err(|_| println!("failed to get listen port.")) .unwrap() }); let our_ip = root_cidr .iter() .find(|ip| root_cidr.is_assignable(*ip)) .unwrap(); let server_cidr = IpNetwork::new(our_ip, root_cidr.max_prefix())?; let config_path = conf.config_path(&name); let our_keypair = KeyPair::generate(); let config = ConfigFile { private_key: our_keypair.private.to_base64(), listen_port, address: our_ip, network_cidr_prefix: root_cidr.prefix(), }; config.write_to_path(&config_path)?; let db_init_data = DbInitData { root_cidr_name: name.to_string(), root_cidr, server_cidr, our_ip, public_key_base64: our_keypair.public.to_base64(), endpoint, }; // TODO(bschwind) - Clean up the config file and database // if any errors occur in these init calls. let database_path = conf.database_path(&name); let conn = create_database(&database_path).map_err(|_| { format!( "failed to create database {}", "(are you not running as root?)".bold() ) })?; populate_database(&conn, db_init_data)?; println!( "{} Created database at {}\n", "[*]".dimmed(), database_path.to_string_lossy().bold() ); printdoc!( " {star} Setup finished. Network {interface} has been {created}! Your new network starts with only one peer: this innernet server. Next, you'll want to create additional CIDRs and peers using the commands: {wg_manage_server} {add_cidr} {interface}, and {wg_manage_server} {add_peer} {interface} See the documentation for more detailed instruction on designing your network. When you're ready to start the network, you can auto-start the server: {systemctl_enable}{interface} ", star = "[*]".dimmed(), interface = name.to_string().yellow(), created = "created".green(), wg_manage_server = "innernet-server".yellow(), add_cidr = "add-cidr".yellow(), add_peer = "add-peer".yellow(), systemctl_enable = "systemctl enable --now innernet-server@".yellow(), ); Ok(()) }