mtls

.gitignore

@@ -1,3 +1,7 @@
+*.crt
+*.key
+
+
 # ---> VisualStudioCode
 .vscode/*
 !.vscode/settings.json

wg-p2p-client.py

@@ -2,9 +2,10 @@ import hashlib
 from time import sleep
 import yaml
 import requests
+from pathlib import Path
 from wgconfig import WireGuardConfig, wg_showconf, wg_syncconf
-with open("wg-p2p-client.conf") as f:
-    cfg = yaml.safe_load(f)
+
+cfg = yaml.safe_load(Path(__file__).with_suffix(".conf").read_text())
 last_hash = ""
 last_local_hash = ""
 url = f"{cfg['url']}/hash/{cfg['remote_wg']}"
@@ -20,7 +21,11 @@ while True:
         for peer in cfg["peers"]:
             if p := local_cfg.get_peer(peer):
                 url2 = f"{urlpat2}/{peer}"
-                res = requests.get(url2).json()
+                res = requests.get(
+                    url2,
+                    cert=("client1.crt", "client1.key"),
+                    verify=False,
+                ).json()
                 p["Endpoint"] = res["Endpoint"]
         wg_syncconf(cfg["local_wg"], str(local_cfg))
     last_hash = new_hash

wg-p2p-server.py

@@ -1,10 +1,14 @@
 from fastapi import FastAPI, Response
 from wgconfig import WireGuardConfig, wg_showconf, wg_syncconf
 from dataclasses import dataclass
+from pathlib import Path
 import hashlib
+import yaml
 
 app = FastAPI()
 
+cfg = yaml.safe_load(Path(__file__).with_suffix(".conf").read_text())
+
 
 @app.get("/peers/{ifname}")
 def get_all_peer(ifname: str):