Welcome, your token is valid. Click below to generate your secure config.
''' HTML_INSTRUCTIONS = '''Welcome! This page allows you to generate a secure, one-time WireGuard VPN configuration. Follow these instructions carefully:
https://wgsetup.glorytoyah.org/setup?token=YourToken.conf file will be downloaded — this is your personal VPN configuration file..conf file..conf file.Activate the VPN tunnel. You are now securely connected to your private network.
''' def check_auth(username, password): return username == ADMIN_USERNAME and password == ADMIN_PASSWORD def authenticate(): return Response("Login Required", 401, {"WWW-Authenticate": "Basic realm='Login Required'"}) def requires_auth(f): @wraps(f) def decorated(*args, **kwargs): auth = request.authorization if not auth or not check_auth(auth.username, auth.password): return authenticate() return f(*args, **kwargs) return decorated def load_tokens(): if os.path.exists(TOKEN_DB_PATH): with open(TOKEN_DB_PATH, "r") as f: tokens = json.load(f) upgraded = {} for k, v in tokens.items(): if isinstance(v, str): upgraded[k] = {"ip": v, "group": "unknown"} else: upgraded[k] = v return upgraded return {} def save_tokens(tokens): with open(TOKEN_DB_PATH, "w") as f: json.dump(tokens, f, indent=2) def load_subnets(): if os.path.exists(SUBNET_DB_PATH): with open(SUBNET_DB_PATH, "r") as f: return json.load(f) return {} def save_subnets(subnets): with open(SUBNET_DB_PATH, "w") as f: json.dump(subnets, f, indent=2) @app.route("/admin/subnets", methods=["GET", "POST"]) @requires_auth def manage_subnets(): subnets = load_subnets() message = "" if request.method == "POST": name = request.form.get("name") base = request.form.get("base") if name and base: subnets[name] = base save_subnets(subnets) message = f"Added subnet: {name} - {base}" html = "| Group | Base Subnet |
|---|---|
| {name} | {base} |
{message}
" if message else "" html += """ """ return html @app.route("/generate-and-redirect/| Token | IP | Group | Action |
|---|---|---|---|
| {t} | {v['ip']} | {v['group']} | Revoke |
View Used Tokens | Manage Subnets
" return html @app.route("/admin/revoke/{f.read()}"
@app.route("/setup", methods=["GET", "POST"])
def setup():
token = request.args.get("token")
tokens = load_tokens()
if token not in tokens:
return abort(403, description="Invalid or missing token.")
assigned_ip = tokens[token]["ip"]
if request.method == "POST":
try:
wg_path = shutil.which("wg")
if not wg_path:
raise FileNotFoundError("WireGuard 'wg' binary not found in system path.")
private_key = subprocess.check_output(["wg", "genkey"]).decode().strip()
public_key = subprocess.check_output(["wg", "pubkey"], input=private_key.encode()).decode().strip()
except Exception as e:
app.logger.error(f"Failed to run WireGuard key generation: {e}")
return "Internal error: key generation failed", 500
config_content = f"""
[Interface]
PrivateKey = {private_key}
Address = {assigned_ip}
[Peer]
PublicKey = {SERVER_PUBLIC_KEY}
Endpoint = {SERVER_ENDPOINT}
AllowedIPs = 0.0.0.0/0
PersistentKeepalive = 25
"""
temp_dir = tempfile.mkdtemp()
config_path = os.path.join(temp_dir, f"wgclient_{token}.conf")
with open(config_path, "w") as f:
f.write(config_content)
try:
with open(KEY_LOG_PATH, "a", encoding="utf-8") as log:
log.write(f"[{datetime.now()}] {token} -> {public_key} ({assigned_ip})\n")
except Exception as e:
app.logger.error(f"Failed to write to key log: {e}")
peer_entry = f"\n[Peer]\nPublicKey = {public_key}\nAllowedIPs = {assigned_ip.split('/')[0]}/32\n"
try:
os.makedirs(os.path.dirname(PEERS_CONF_PATH), exist_ok=True)
with open(PEERS_CONF_PATH, "a") as peerconf:
peerconf.write(peer_entry)
subprocess.run(["sudo", "wg", "addconf", "wg0", PEERS_CONF_PATH], check=True)
except Exception as e:
app.logger.error(f"Failed to update live WireGuard config: {e}")
with open(USED_LOG_PATH, "a") as log:
log.write(f"[USED] {token} - {tokens[token]}\n")
tokens.pop(token)
save_tokens(tokens)
return send_file(config_path, as_attachment=True)
return render_template_string(HTML_FORM)
@app.route("/instructions")
def instructions():
return render_template_string(HTML_INSTRUCTIONS)
if __name__ == "__main__":
app.run(host="0.0.0.0", port=5000)