2020-06-21 12:32:08 +02:00
|
|
|
package headscale
|
|
|
|
|
|
|
|
import (
|
|
|
|
"encoding/json"
|
|
|
|
"fmt"
|
|
|
|
"log"
|
2021-02-22 00:53:37 +01:00
|
|
|
"sort"
|
2021-02-22 23:27:33 +01:00
|
|
|
"strconv"
|
2020-06-21 12:32:08 +02:00
|
|
|
"time"
|
|
|
|
|
|
|
|
"github.com/jinzhu/gorm/dialects/postgres"
|
2021-02-20 22:43:07 +01:00
|
|
|
"inet.af/netaddr"
|
2020-06-21 12:32:08 +02:00
|
|
|
"tailscale.com/tailcfg"
|
2021-02-20 22:43:07 +01:00
|
|
|
"tailscale.com/wgengine/wgcfg"
|
2020-06-21 12:32:08 +02:00
|
|
|
)
|
|
|
|
|
2021-02-23 20:10:58 +01:00
|
|
|
// Machine is a Headscale client
|
2020-06-21 12:32:08 +02:00
|
|
|
type Machine struct {
|
|
|
|
ID uint64 `gorm:"primary_key"`
|
|
|
|
MachineKey string `gorm:"type:varchar(64);unique_index"`
|
|
|
|
NodeKey string
|
2021-02-21 21:34:28 +01:00
|
|
|
DiscoKey string
|
2020-06-21 12:32:08 +02:00
|
|
|
IPAddress string
|
2021-02-23 20:10:58 +01:00
|
|
|
Name string
|
2020-06-21 12:32:08 +02:00
|
|
|
|
|
|
|
Registered bool // temp
|
|
|
|
LastSeen *time.Time
|
|
|
|
Expiry *time.Time
|
|
|
|
|
|
|
|
HostInfo postgres.Jsonb
|
|
|
|
Endpoints postgres.Jsonb
|
|
|
|
|
|
|
|
CreatedAt time.Time
|
|
|
|
UpdatedAt time.Time
|
|
|
|
DeletedAt *time.Time
|
|
|
|
}
|
|
|
|
|
|
|
|
// For the time being this method is rather naive
|
|
|
|
func (m Machine) isAlreadyRegistered() bool {
|
|
|
|
return m.Registered
|
|
|
|
}
|
|
|
|
|
|
|
|
func (m Machine) toNode() (*tailcfg.Node, error) {
|
|
|
|
nKey, err := wgcfg.ParseHexKey(m.NodeKey)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
mKey, err := wgcfg.ParseHexKey(m.MachineKey)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
2021-02-23 20:10:58 +01:00
|
|
|
|
|
|
|
var discoKey tailcfg.DiscoKey
|
|
|
|
if m.DiscoKey != "" {
|
|
|
|
dKey, err := wgcfg.ParseHexKey(m.DiscoKey)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
discoKey = tailcfg.DiscoKey(dKey)
|
|
|
|
} else {
|
|
|
|
discoKey = tailcfg.DiscoKey{}
|
2021-02-21 21:34:28 +01:00
|
|
|
}
|
2021-02-23 20:10:58 +01:00
|
|
|
|
2021-02-20 22:43:07 +01:00
|
|
|
addrs := []netaddr.IPPrefix{}
|
|
|
|
allowedIPs := []netaddr.IPPrefix{}
|
2020-06-21 12:32:08 +02:00
|
|
|
|
2021-02-20 22:43:07 +01:00
|
|
|
ip, err := netaddr.ParseIPPrefix(fmt.Sprintf("%s/32", m.IPAddress))
|
2020-06-21 12:32:08 +02:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
2021-02-23 20:10:58 +01:00
|
|
|
addrs = append(addrs, ip) // missing the ipv6 ?
|
2020-06-21 12:32:08 +02:00
|
|
|
allowedIPs = append(allowedIPs, ip) // looks like the client expect this
|
|
|
|
|
|
|
|
endpoints := []string{}
|
2021-02-23 20:10:58 +01:00
|
|
|
if len(m.Endpoints.RawMessage) != 0 {
|
|
|
|
be, err := m.Endpoints.MarshalJSON()
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
err = json.Unmarshal(be, &endpoints)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
2020-06-21 12:32:08 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
hostinfo := tailcfg.Hostinfo{}
|
2021-02-23 20:10:58 +01:00
|
|
|
if len(m.HostInfo.RawMessage) != 0 {
|
|
|
|
hi, err := m.HostInfo.MarshalJSON()
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
err = json.Unmarshal(hi, &hostinfo)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
2020-06-21 12:32:08 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
n := tailcfg.Node{
|
2021-02-22 23:27:33 +01:00
|
|
|
ID: tailcfg.NodeID(m.ID), // this is the actual ID
|
|
|
|
StableID: tailcfg.StableNodeID(strconv.FormatUint(m.ID, 10)), // in headscale, unlike tailcontrol server, IDs are permantent
|
2021-02-23 20:10:58 +01:00
|
|
|
Name: hostinfo.Hostname,
|
2020-06-21 12:32:08 +02:00
|
|
|
User: 1,
|
|
|
|
Key: tailcfg.NodeKey(nKey),
|
|
|
|
KeyExpiry: *m.Expiry,
|
|
|
|
Machine: tailcfg.MachineKey(mKey),
|
2021-02-23 20:10:58 +01:00
|
|
|
DiscoKey: discoKey,
|
2020-06-21 12:32:08 +02:00
|
|
|
Addresses: addrs,
|
|
|
|
AllowedIPs: allowedIPs,
|
|
|
|
Endpoints: endpoints,
|
|
|
|
// DERP: "127.3.3.40:4", // wtf?
|
|
|
|
|
|
|
|
Hostinfo: hostinfo,
|
|
|
|
Created: m.CreatedAt,
|
|
|
|
LastSeen: m.LastSeen,
|
|
|
|
|
2021-02-23 20:10:58 +01:00
|
|
|
KeepAlive: true,
|
2020-06-21 12:32:08 +02:00
|
|
|
MachineAuthorized: m.Registered,
|
|
|
|
}
|
|
|
|
// n.Key.MarshalText()
|
|
|
|
return &n, nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func (h *Headscale) getPeers(m Machine) (*[]*tailcfg.Node, error) {
|
|
|
|
db, err := h.db()
|
|
|
|
if err != nil {
|
|
|
|
log.Printf("Cannot open DB: %s", err)
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
defer db.Close()
|
|
|
|
|
2021-02-23 20:10:58 +01:00
|
|
|
// Add user management here
|
2020-06-21 12:32:08 +02:00
|
|
|
machines := []Machine{}
|
2021-02-21 21:03:25 +01:00
|
|
|
if err = db.Where("machine_key <> ? AND registered", m.MachineKey).Find(&machines).Error; err != nil {
|
2020-06-21 12:32:08 +02:00
|
|
|
log.Printf("Error accessing db: %s", err)
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
peers := []*tailcfg.Node{}
|
|
|
|
for _, mn := range machines {
|
|
|
|
peer, err := mn.toNode()
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
peers = append(peers, peer)
|
|
|
|
}
|
2021-02-22 00:53:37 +01:00
|
|
|
sort.Slice(peers, func(i, j int) bool { return peers[i].ID < peers[j].ID })
|
2020-06-21 12:32:08 +02:00
|
|
|
return &peers, nil
|
|
|
|
}
|