jcoffey
6c006e1d4d
Go backend that drives kernel WireGuard over netlink (wireguard-go as the fallback), nftables NAT with MSS clamping, forwarding and buffer sysctls, SQLite for peers, users, sessions, traffic history and the audit log. React console: dashboard with live rates and usage history, peer management with QR codes and .conf downloads, disconnect, session reset, key rotation, expiry, client-supplied keys, settings, users with admin and viewer roles, two-factor authentication with recovery codes, audit log. Docker image on Alpine with compose files for bridged and host networking, CI and GHCR publish workflows, performance notes.
34 lines
900 B
YAML
34 lines
900 B
YAML
name: CI
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
pull_request:
|
|
# Lets a run be started by hand against any ref, including one GitHub
|
|
# queued and then orphaned.
|
|
workflow_dispatch:
|
|
permissions:
|
|
contents: read
|
|
jobs:
|
|
check:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v7
|
|
- uses: actions/setup-node@v7
|
|
with:
|
|
node-version: 26
|
|
cache: npm
|
|
cache-dependency-path: web/package-lock.json
|
|
- run: npm ci --ignore-scripts --no-audit --no-fund
|
|
working-directory: web
|
|
- run: npm run build
|
|
working-directory: web
|
|
- uses: actions/setup-go@v6
|
|
with:
|
|
go-version-file: go.mod
|
|
- run: go vet ./...
|
|
- run: go test -count=1 ./...
|
|
- name: govulncheck
|
|
run: go run golang.org/x/vuln/cmd/govulncheck@latest ./...
|
|
- name: Docker build
|
|
run: docker build -t wgx:ci .
|