diff --git a/src/etc/inc/plugins.inc.d/wireguard.inc b/src/etc/inc/plugins.inc.d/wireguard.inc index 69ce633e8..5021101d5 100644 --- a/src/etc/inc/plugins.inc.d/wireguard.inc +++ b/src/etc/inc/plugins.inc.d/wireguard.inc @@ -144,7 +144,7 @@ function wireguard_prepare($device) function wireguard_configure() { return [ - 'newwanip' => ['wireguard_renew:2'], + 'newwanip' => ['wireguard_sync:2'], 'vpn' => ['wireguard_configure_do:2'], ]; } @@ -162,15 +162,32 @@ function wireguard_configure_do($verbose = false, $unused = '') service_log("done.\n", $verbose); } -function wireguard_renew($verbose = false, $unused = '') +function wireguard_sync($verbose = false, $unused = '') { if (!wireguard_enabled()) { return; } - service_log('Renewing WireGuard VPN...', $verbose); + $instances = []; + foreach ((new OPNsense\Wireguard\Server())->servers->server->iterateItems() as $node) { + if (!empty((string)$node->enabled)) { + $instances[(string)$node->interface] = (string)$node->cnfFilename; + } + } - configd_run('wireguard renew'); + if (!count($instances)) { + return; + } + + service_log('Synchronizing WireGuard VPN...', $verbose); + + openlog('wireguard', LOG_ODELAY, LOG_AUTH); + + foreach ($instances as $device => $config) { + mwexecf('/usr/bin/wg syncconf %s %s', [$device, $config]); + } + + reopenlog(); service_log("done.\n", $verbose); }