cwx/op-packages
1
0 Fork 0
mirror of https://github.com/kiddin9/op-packages.git synced 2026-11-05 00:13:56 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

🏅 Sync 2026-10-30 20:56:14

Browse Source
This commit is contained in:
github-actions[bot] committed 2026-10-30 20:56:14 +08:00
1 parent f470897df5
commit 2d2368945f
32 files changed
+2793 -2828
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

luci-app-tailscale-community/root/etc/init.d/tailscale-settings
+36 -15
View File
@@ -254,10 +254,18 @@ apply_settings() {
&& set -- "$@" --webclient=true \
|| set -- "$@" --webclient=false
# --snat-subnet-routes (inverse of nosnat)
[ "$nosnat" = "1" ] \
&& set -- "$@" --snat-subnet-routes=false \
|| set -- "$@" --snat-subnet-routes=true
# Everything below is handed to 'tailscale set' in one call, and 'set'
# aborts on an unknown flag. Gate the newer options on the first release
# that accepts them, so an older CLI still applies the rest.
local ts_ver
ts_ver=$("$ts_bin" version 2>/dev/null | head -n1)
# --snat-subnet-routes (requires tailscale >= 1.66.1)
if [ -n "$ts_ver" ] && version_gte "$ts_ver" "1.66.1"; then
[ "$nosnat" = "1" ] \
&& set -- "$@" --snat-subnet-routes=false \
|| set -- "$@" --snat-subnet-routes=true
fi
# --advertise-routes (comma-separated, empty clears routes)
set -- "$@" "--advertise-routes=$routes"
@@ -268,13 +276,11 @@ apply_settings() {
# when an exit node is configured, always allow LAN access
[ -n "$exit_node" ] && set -- "$@" --exit-node-allow-lan-access=true
# --hostname (only set if non-empty)
[ -n "$hostname" ] && set -- "$@" "--hostname=$hostname"
# --hostname (empty resets it to the OS hostname)
set -- "$@" "--hostname=$hostname"
# --relay-server-port (requires tailscale >= 1.90.5)
local ts_ver
ts_ver=$("$ts_bin" version 2>/dev/null | head -n1)
if [ -n "$ts_ver" ] && version_gte "$ts_ver" "1.90.5"; then
# --relay-server-port (requires tailscale >= 1.84.0)
if [ -n "$ts_ver" ] && version_gte "$ts_ver" "1.84.0"; then
if [ "$enable_relay" = "1" ]; then
set -- "$@" "--relay-server-port=${relay_server_port:-40000}"
else
@@ -282,9 +288,16 @@ apply_settings() {
fi
fi
# --netfilter-mode (only when disable_fw_config is enabled and tailscale init doesn't already handle it)
if [ "$disable_fw_config" = "1" ]; then
set -- "$@" --netfilter-mode=off
# --netfilter-mode (off when disable_fw_config is enabled, back to on
# otherwise; requires tailscale >= 1.66.1)
if [ -n "$ts_ver" ] && version_gte "$ts_ver" "1.66.1"; then
if [ "$disable_fw_config" = "1" ]; then
set -- "$@" --netfilter-mode=off
else
set -- "$@" --netfilter-mode=on
fi
elif [ "$disable_fw_config" = "1" ]; then
logger -t "$NAME" "tailscale ${ts_ver:-before 1.66.1} has no --netfilter-mode in 'set', ignoring disable_fw_config"
fi
logger -t "$NAME" "Applying settings"
@@ -319,8 +332,16 @@ sync_service_enabled() {
# the baseline instead of treating it as a transition: starting
# a daemon here would run start_service, which arms another UCI
# rollback window right after the one this apply is inside.
echo "$service_enabled" > "$ENABLED_FILE"
prev="$service_enabled"
#
# An armed disable request is the exception: the user just asked
# for the stop, so the baseline has to be "was running", not "was
# stopped", or the request would be dropped without stopping.
if [ -f "$DISABLE_REQUEST_FILE" ]; then
prev=1
else
echo "$service_enabled" > "$ENABLED_FILE"
prev="$service_enabled"
fi
;;
esac