truecharts/library-charts
1
0
Fork 0
mirror of https://github.com/truecharts/library-charts.git synced 2026-07-07 13:41:22 -03:00
Code Issues Packages Projects Releases Wiki Activity

Dynamic gluetun and wireguard cidr whitelist based on chartContext

Browse Source
This commit is contained in:
Kjeld Schouten-Lebbing
2023-04-16 13:56:02 +02:00
parent c6eb251e23
commit bde54e32ec
2 changed files with 11 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
library/common/templates/addons/vpn/_gluetunContainer.tpl
View File

@@ -32,24 +32,18 @@ env:
DNS_KEEP_NAMESERVER: on
DOT: off
{{- if $.Values.addons.vpn.killSwitch }}
{{- $excludednetworks := ( printf "%v,%v" $.Values.chartContext.podCIDR $.Values.chartContext.svcCIDR ) -}}
{{- range $.Values.addons.vpn.excludedNetworks_IPv4 -}}
{{- $excludednetworks = ( printf "%v,%v" $excludednetworks . ) -}}
{{- end }}
{{- range $.Values.addons.vpn.excludedNetworks_IPv6 -}}
{{- $excludednetworksv6 = ( printf "%v,%v" $excludednetworks . ) -}}
{{- end }}
FIREWALL: "on"
{{- $excludednetworksv4 := "172.16.0.0/12" -}}
{{- range $.Values.addons.vpn.excludedNetworks_IPv4 -}}
{{- $excludednetworksv4 = ( printf "%v,%v" $excludednetworksv4 . ) -}}
{{- end }}
{{- if $.Values.addons.vpn.excludedNetworks_IPv6 -}}
{{- $excludednetworksv6 := "" -}}
{{- range $.Values.addons.vpn.excludedNetworks_IPv4 -}}
{{- $excludednetworksv6 = ( printf "%v,%v" $excludednetworksv6 . ) -}}
{{- end }}
FIREWALL_OUTBOUND_SUBNETS: {{ ( printf "%v,%v" $excludednetworksv4 $excludednetworksv6 ) | quote }}
{{- else -}}
FIREWALL_OUTBOUND_SUBNETS: {{ $excludednetworksv4 | quote }}
{{- end -}}
{{- else -}}
FIREWALL_OUTBOUND_SUBNETS: {{ $excludednetworks | quote }}
{{- else }}
FIREWALL: "off"
{{- end -}}
{{- end }}
{{- with $.Values.addons.vpn.env }}
{{- . | toYaml | nindent 2 }}

2
library/common/templates/addons/vpn/_wireguardContainer.tpl
View File

@@ -37,7 +37,7 @@ env:
IPTABLES_BACKEND: "nft"
{{- if $.Values.addons.vpn.killSwitch }}
KILLSWITCH: "true"
{{- $excludednetworksv4 := "172.16.0.0/12" -}}
{{- $excludednetworksv4 := ( printf "%v;%v" $.Values.chartContext.podCIDR $.Values.chartContext.svcCIDR ) -}}
{{- range $.Values.addons.vpn.excludedNetworks_IPv4 -}}
{{- $excludednetworksv4 = ( printf "%v;%v" $excludednetworksv4 . ) -}}
{{- end }}