diff options
| author | Arpit Chakladar <arpitchakladar+git@gmail.com> | 2026-07-28 23:06:29 +0530 |
|---|---|---|
| committer | Arpit Chakladar <arpitchakladar+git@gmail.com> | 2026-07-28 23:06:29 +0530 |
| commit | 36630da39cb82a0fb75991ffeeefcb15623a47ea (patch) | |
| tree | 086fcac4fc0070d0225bab396e57a0b59c1413b8 /modules/scripts/vpn-connect | |
| parent | f357c956a5c9f8a662e1cb354d97eccc55deca0c (diff) | |
| download | home-manager-config-36630da39cb82a0fb75991ffeeefcb15623a47ea.tar.gz home-manager-config-36630da39cb82a0fb75991ffeeefcb15623a47ea.zip | |
feat(usque): using usque for connecting with cloudflare warp
- Using usque for an opensource alternative to cloudflare-warp client
- Created utility script usque-warp that can automatically connect and
disconnect channel with cloudflare warp
Diffstat (limited to 'modules/scripts/vpn-connect')
| -rw-r--r-- | modules/scripts/vpn-connect/assertions.nix | 11 | ||||
| -rw-r--r-- | modules/scripts/vpn-connect/default.nix | 32 | ||||
| -rw-r--r-- | modules/scripts/vpn-connect/script.sh | 77 |
3 files changed, 0 insertions, 120 deletions
diff --git a/modules/scripts/vpn-connect/assertions.nix b/modules/scripts/vpn-connect/assertions.nix deleted file mode 100644 index 252df86..0000000 --- a/modules/scripts/vpn-connect/assertions.nix +++ /dev/null @@ -1,11 +0,0 @@ -{ config, ... }: -[ - { - assertion = !config.scripts.vpn-connect.enable || config.security.openvpn.enable; - message = "scripts.vpn-connect is enabled but requires `security.openvpn.enable`."; - } - { - assertion = !config.scripts.vpn-connect.enable || config.terminal.fzf.enable; - message = "scripts.vpn-connect is enabled but requires `terminal.fzf.enable`."; - } -] diff --git a/modules/scripts/vpn-connect/default.nix b/modules/scripts/vpn-connect/default.nix deleted file mode 100644 index 194513f..0000000 --- a/modules/scripts/vpn-connect/default.nix +++ /dev/null @@ -1,32 +0,0 @@ -{ - config, - lib, - pkgs, - ... -}: -let - inherit ((import ../lib.nix { inherit lib pkgs; })) mkScriptModule; - base = mkScriptModule { - name = "vpn-connect"; - path = ./script.sh; - description = "VPN-connect - OpenVPN connection script with credential caching and monitoring"; - env = { - SYSTEMD_RESOLVED_PATH = "${config.security.openvpn.package}/libexec/update-systemd-resolved"; - }; - deps = [ - config.terminal.fzf.package - config.security.openvpn.package - pkgs.coreutils - pkgs.findutils - pkgs.gnugrep - pkgs.gnused - ]; - inherit config; - }; -in -{ - options = base.options; - config = base.moduleConfig // { - assertions = base.moduleConfig.assertions ++ (import ./assertions.nix { inherit config lib; }); - }; -} diff --git a/modules/scripts/vpn-connect/script.sh b/modules/scripts/vpn-connect/script.sh deleted file mode 100644 index 4ba8f3d..0000000 --- a/modules/scripts/vpn-connect/script.sh +++ /dev/null @@ -1,77 +0,0 @@ -CONF_DIR="$HOME/.config/openvpn" -CREDS_DIR="$CONF_DIR/credentials" -SERVERS_DIR="$CONF_DIR/servers" -CACHE_FILE="$HOME/.cache/openvpn/last_connection" -PID_FILE="$HOME/.cache/openvpn/vpn.pid" -LOG_FILE="$HOME/.cache/openvpn/vpn.log" - -mkdir -p "$CREDS_DIR" "$SERVERS_DIR" "$(dirname "$CACHE_FILE")" - -REFRESH=false -if [[ "$1" == "--refresh" || "$1" == "-r" ]]; then - REFRESH=true -fi - -# Load cache -if [[ "$REFRESH" == false && -f "$CACHE_FILE" ]]; then - source "$CACHE_FILE" - if [[ ! -f "$CRED" || ! -f "$SERVER" ]]; then - REFRESH=true - fi -else - REFRESH=true -fi - -# Select if needed -if [[ "$REFRESH" == true ]]; then - CRED=$(find "$CREDS_DIR" -type f | fzf --prompt="Select Credentials > ") - [ -z "$CRED" ] && exit 1 - - SERVER=$(find "$SERVERS_DIR" -type f \( -name "*.conf" -o -name "*.ovpn" \) | fzf --prompt="Select VPN Server > ") - [ -z "$SERVER" ] && exit 1 - - echo "CRED=\"$CRED\"" > "$CACHE_FILE" - echo "SERVER=\"$SERVER\"" >> "$CACHE_FILE" -fi - -echo "Connecting to $SERVER..." - -TMP_CONF=$(mktemp /tmp/vpn-config.XXXXXX) - -sed -e '/up \/etc\/openvpn\/update-resolv-conf/d' \ - -e '/down \/etc\/openvpn\/update-resolv-conf/d' "$SERVER" > "$TMP_CONF" - -# Run in background -sudo -v || exit 1 - -nohup sudo openvpn \ - --config "$TMP_CONF" \ - --auth-user-pass "$CRED" \ - --script-security 2 \ - --up "$SYSTEMD_RESOLVED_PATH" \ - --down "$SYSTEMD_RESOLVED_PATH" \ - --down-pre \ - > "$LOG_FILE" 2>&1 & - -VPN_PID=$! - -echo $VPN_PID > "$PID_FILE" -echo "VPN started in background (PID: $VPN_PID)" -echo "Logs: $LOG_FILE" - -# Wait until connected -echo -n "Waiting for VPN connection" -while true; do - if grep -q "Initialization Sequence Completed" "$LOG_FILE" 2>/dev/null; then - echo "" - echo "VPN connected successfully." - break - fi - if ! kill -0 "$VPN_PID" 2>/dev/null; then - echo "" - echo "VPN process died. Check logs: $LOG_FILE" - exit 1 - fi - sleep 1 - echo -n "." -done |
