The generated WireGuard config contains the server private key and client preshared keys, so it is now written with mode 0600 by default instead of inheriting a umask-dependent (often world-readable) mode. The mode is configurable via the global settings UI or WGUI_CONFIG_FILE_MODE. The file is still written in place so the container inotify restart watch keeps working. |
||
|---|---|---|
| .. | ||
| cache.go | ||
| config.go | ||
| hash.go | ||
| util.go | ||
| util_test.go | ||