- config_get gateway_id "${cfg}" "gateway_id" "${default_gateway_id}"
- config_get gateway_interface "${cfg}" "gateway_interface" "br-lan"
- config_get auth_server_hostname "${cfg}" "auth_server_hostname"
- config_get auth_server_port "${cfg}" "auth_server_port" "80"
- config_get auth_server_path "${cfg}" "auth_server_path" "/wifidog/"
- config_get auth_server_path_login "${cfg}" "auth_server_path_login"
- config_get auth_server_path_portal "${cfg}" "auth_server_path_portal"
- config_get auth_server_path_msg "${cfg}" "auth_server_path_msg"
- config_get auth_server_path_ping "${cfg}" "auth_server_path_ping"
- config_get auth_server_path_auth "${cfg}" "auth_server_path_auth"
- config_get delta_traffic "${cfg}" "delta_traffic"
- config_get check_interval "${cfg}" "check_interval" "60"
- config_get js_filter "${cfg}" "js_filter" 1
- config_get client_timeout "${cfg}" "client_timeout" "5"
- config_get trusted_domains "${cfg}" "trusted_domains"
- config_get trusted_maclist "${cfg}" "trusted_maclist"
- config_get untrusted_maclist "${cfg}" "untrusted_maclist"
- config_get pool_mode "${cfg}" "pool_mode" 0
- config_get thread_number "${cfg}" "thread_number" 20
- config_get queue_size "${cfg}" "queue_size" 200
- config_get wired_passed "${cfg}" "wired_passed" 1
- config_get trusted_iplist "${cfg}" "trusted_iplist"
- config_get trusted_pan_domains "${cfg}" "trusted_pan_domains"
- config_get proxy_port "${cfg}" "proxy_port"
- config_get no_auth "${cfg}" "no_auth"
- config_get apple_cna "${cfg}" "bypass_apple_cna"
- config_get update_domain_interval "${cfg}" "update_domain_interval"
- config_get dns_timeout "${cfg}" "dns_timeout"
-
- local set_auth_server_path_login
- local set_auth_server_path_portal
- local set_auth_server_path_msg
- local set_auth_server_path_ping
- local set_auth_server_path_auth
- local set_delta_traffic
- local set_trusted_maclist
- local set_untrusted_maclist
- local set_trusted_domains
- local set_trusted_iplist
- local set_trusted_pan_domains
- local set_proxy_port
- local set_no_auth
- local set_firewall_rule_global
- local set_firewall_rule_validating_users
- local set_firewall_rule_known_users
- local set_firewall_rule_auth_is_down
- local set_firewall_rule_unknown_users
- local set_firewall_rule_locked_users
- local set_apple_cna
- local set_update_domain_interval
- local set_dns_timeout
-
- set_auth_server_path_login=$([ -n "$auth_server_path_login" ] && echo " LoginScriptPathFragment $auth_server_path_login")
- set_auth_server_path_portal=$([ -n "$auth_server_path_portal" ] && echo " PortalScriptPathFragment $auth_server_path_portal")
- set_auth_server_path_msg=$([ -n "$auth_server_path_msg" ] && echo " MsgScriptPathFragment $auth_server_path_msg")
- set_auth_server_path_ping=$([ -n "$auth_server_path_ping" ] && echo " PingScriptPathFragment $auth_server_path_ping")
- set_auth_server_path_auth=$([ -n "$auth_server_path_auth" ] && echo " AuthScriptPathFragment $auth_server_path_auth")
- set_delta_traffic=$([ -n "$delta_traffic" ] && echo "DeltaTraffic $delta_traffic")
- set_trusted_maclist=$([ -n "$trusted_maclist" ] && echo "TrustedMACList $trusted_maclist")
- set_untrusted_maclist=$([ -n "$untrusted_maclist" ] && echo "UntrustedMACList $untrusted_maclist")
- set_trusted_domains=$([ -n "$trusted_domains" ] && echo "TrustedDomains $trusted_domains")
- set_trusted_iplist=$([ -n "$trusted_iplist" ] && echo "TrustedIpList $trusted_iplist")
- set_trusted_pan_domains=$([ -n "$trusted_pan_domains" ] && echo "TrustedPanDomains $trusted_pan_domains")
- set_proxy_port=$([ -n "$proxy_port" ] && echo "Proxyport $proxy_port")
- set_no_auth=$([ -n "$no_auth" ] && echo "NoAuth $no_auth")
- set_firewall_rule_global=$(config_list_foreach "$cfg" "firewall_rule_global" echo_firewall_rule)
- set_firewall_rule_validating_users=$(config_list_foreach "$cfg" "firewall_rule_validating_users" echo_firewall_rule)
- set_firewall_rule_known_users=$(config_list_foreach "$cfg" "firewall_rule_known_users" echo_firewall_rule)
- set_firewall_rule_auth_is_down=$(config_list_foreach "$cfg" "firewall_rule_auth_is_down" echo_firewall_rule)
- set_firewall_rule_unknown_users=$(config_list_foreach "$cfg" "firewall_rule_unknown_users" echo_firewall_rule)
- set_firewall_rule_locked_users=$(config_list_foreach "$cfg" "firewall_rule_locked_users" echo_firewall_rule)
- set_apple_cna=$([ -n "$apple_cna" ] && echo "BypassAppleCNA $apple_cna")
- set_update_domain_interval=$([ -n "$update_domain_interval" ] && echo "UpdateDomainInterval $update_domain_interval")
- set_dns_timeout=$([ -n "$dns_timeout" ] && echo "DNSTimeout $dns_timeout")
-
- cat <<-EOF >$CONFIGFILE
- GatewayID $gateway_id
- GatewayInterface $gateway_interface
- Externalinterface $external_interface
-
- AuthServer {
- Hostname $auth_server_hostname
- HTTPPort $auth_server_port
- Path $auth_server_path
- $set_auth_server_path_login
- $set_auth_server_path_portal
- $set_auth_server_path_msg
- $set_auth_server_path_ping
- $set_auth_server_path_auth
- }
-
- $set_delta_traffic
- CheckInterval $check_interval
- ClientTimeout $client_timeout
- JsFilter $js_filter
- WiredPassed $wired_passed
- $set_trusted_domains
- $set_untrusted_maclist
- $set_trusted_maclist
- $set_trusted_iplist
- $set_trusted_pan_domains
- $set_proxy_port
- $set_no_auth
- $set_apple_cna
- $set_update_domain_interval
- $set_dns_timeout
-
- FirewallRuleSet global {
- $set_firewall_rule_global
- }
-
- FirewallRuleSet validating-users {
- $set_firewall_rule_validating_users
- FirewallRule allow to 0.0.0.0/0
- }
-
- FirewallRuleSet known-users {
- $set_firewall_rule_known_users
- FirewallRule allow to 0.0.0.0/0
- }
-
- FirewallRuleSet auth-is-down {
- $set_firewall_rule_auth_is_down
- }
-
- FirewallRuleSet unknown-users {
- $set_firewall_rule_unknown_users
- FirewallRule allow udp port 53
- FirewallRule allow tcp port 53
- FirewallRule allow udp port 67
- FirewallRule allow tcp port 67
- }
-
- FirewallRuleSet locked-users {
- $set_firewall_rule_locked_users
- FirewallRule block to 0.0.0.0/0
- }
-EOF
+ uci_validate_section ${NAME} ${NAME} common \
+ 'enabled:bool:0' \
+ 'gateway_id:string' \
+ 'gateway_interface:string:br-lan' \
+ 'external_interface:string:external_interface' \
+ 'auth_server_hostname:string' \
+ 'auth_server_port:port:443' \
+ 'auth_server_path:string:/wifidog/' \
+ 'check_interval:integer:60' \
+ 'client_timeout:integer:5' \
+ 'js_filter:bool:1' \
+ 'wired_passed:bool:1' \
+ 'apple_cna:bool:0' \
+ 'js_filter:bool:1'
+
+ # if gateway_id is not set, get it from br-lan
+ if [ -z "$gateway_id" ]; then
+ gateway_id=$(sed -e 's/://g' /sys/class/net/${gateway_interface}/address)
+ # uci add gateway_id to config file
+ uci set ${NAME}.common.gateway_id=$gateway_id
+ uci commit ${NAME}
+ fi
+
+ # set above variables to config file
+ echo "GatewayID $gateway_id" > ${CONFIGFILE}
+ echo "GatewayInterface $gateway_interface" >> ${CONFIGFILE}
+ echo "ExternalInterface $external_interface" >> ${CONFIGFILE}
+ echo "AuthServer {
+ Hostname $auth_server_hostname
+ HTTPPort $auth_server_port
+ Path $auth_server_path
+}" >> ${CONFIGFILE}
+ echo "CheckInterval $check_interval" >> ${CONFIGFILE}
+ echo "ClientTimeout $client_timeout" >> ${CONFIGFILE}
+ echo "JsFilter $js_filter" >> ${CONFIGFILE}
+ echo "WiredPassed $wired_passed" >> ${CONFIGFILE}
+ echo "BypassAppleCNA $apple_cna" >> ${CONFIGFILE}