The generated WireGuard config contains the server private key and client
preshared keys, so it is now written with mode 0600 by default instead of
inheriting a umask-dependent (often world-readable) mode. The mode is
configurable via the global settings UI or WGUI_CONFIG_FILE_MODE. The file is
still written in place so the container inotify restart watch keeps working.
WGUI_BRAND_TEXT - The brand text of the web application
WGUI_ACCENT_COLOR - The color of the interface sidebar
WGUI_LOGO_FILE_PATH - The file path of the website logo
WGUI_PAGE_TITLE_PREFIX - The HTML title prefix for all pages
This covers the normal use-case where clients generate keys
locally on their device and notify the server of their new/updated keys.
The server verifies Preshared and Public keys independently of each
other. Should a client generate a new tunnel which lacks a PSK and send
only a Public key to the server (admin) where the earlier server created
profile has a Preshared key, the server admin/user must determine the
course of action:
keep or remove the PSK.
Under Global Settings, the MTU value on the left is by default set to 1450, but the documentation claims 1420. This updates the documentation to match the correct default value.
Helpful for those who already have users deployed.
Enter `-` in the Preshared Key field at user creation time to skip its
creation.
The template conf takes care of the rest.
Fixes issue #235
After login, my browser gets a 404 for `/wireguard`. `wireguard` might
not be explicitly set by `BASE_PATH`, so just use the `{{.basePath}}`
instead.
Fixes#259.