The generated WireGuard config contains the server private key and client preshared keys, so it is now written with mode 0600 by default instead of inheriting a umask-dependent (often world-readable) mode. The mode is configurable via the global settings UI or WGUI_CONFIG_FILE_MODE. The file is still written in place so the container inotify restart watch keeps working. |
||
|---|---|---|
| .. | ||
| middlewares.go | ||
| response.go | ||
| routes.go | ||
| routes_wake_on_lan.go | ||
| session.go | ||