Some checks failed
Go / build-and-release (push) Has been cancelled
- Add embedded WireGuard VPN server using wireguard-go + netstack - Implement deterministic /31 subnet allocation from seed + sequence - Use Badger's built-in Sequence for atomic counter allocation - Add NIP-46 bunker server for remote signing over VPN - Add revoked key tracking and access audit logging for users - Add Bunker tab to web UI with WireGuard/bunker QR codes - Support key regeneration with old keypair archiving New environment variables: - ORLY_WG_ENABLED: Enable WireGuard VPN server - ORLY_WG_PORT: UDP port for WireGuard (default 51820) - ORLY_WG_ENDPOINT: Public endpoint for WireGuard - ORLY_WG_NETWORK: Base network for subnet pool (default 10.0.0.0/8) - ORLY_BUNKER_ENABLED: Enable NIP-46 bunker - ORLY_BUNKER_PORT: WebSocket port for bunker (default 3335) Files added: - pkg/wireguard/: WireGuard server, keygen, subnet pool, errors - pkg/bunker/: NIP-46 bunker server and session handling - pkg/database/wireguard.go: Peer storage with audit logging - app/handle-wireguard.go: API endpoints for config/regenerate/audit - app/wireguard-helpers.go: Key derivation helpers - app/web/src/BunkerView.svelte: Bunker UI with QR codes 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
24 lines
902 B
Go
24 lines
902 B
Go
package wireguard
|
|
|
|
import "errors"
|
|
|
|
var (
|
|
// ErrInvalidKeyLength is returned when a key is not exactly 32 bytes.
|
|
ErrInvalidKeyLength = errors.New("invalid key length: must be 32 bytes")
|
|
|
|
// ErrServerNotRunning is returned when an operation requires a running server.
|
|
ErrServerNotRunning = errors.New("wireguard server not running")
|
|
|
|
// ErrEndpointRequired is returned when WireGuard is enabled but no endpoint is set.
|
|
ErrEndpointRequired = errors.New("ORLY_WG_ENDPOINT is required when WireGuard is enabled")
|
|
|
|
// ErrInvalidNetwork is returned when the network CIDR is invalid.
|
|
ErrInvalidNetwork = errors.New("invalid network CIDR")
|
|
|
|
// ErrPeerNotFound is returned when a peer lookup fails.
|
|
ErrPeerNotFound = errors.New("peer not found")
|
|
|
|
// ErrIPExhausted is returned when no more IPs are available in the network.
|
|
ErrIPExhausted = errors.New("no more IP addresses available in network")
|
|
)
|