upstream/opnsense-plugins
1
0
Fork 0
mirror of https://github.com/opnsense/plugins.git synced 2026-05-28 04:34:15 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

security/tailscale: make login timeout (tailscale up --timeout parameter) configurable (#4490)

Browse source
This commit is contained in:
Ben Smithurst 2025-01-27 15:33:29 +00:00 committed by GitHub
parent 7a7a3138a3
commit f45767b6a6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 13 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
security/tailscale/src/opnsense/mvc/app/controllers/OPNsense/Tailscale/forms/settings.xml
View file

@ -5,10 +5,17 @@
<type>checkbox</type>
<help>This will activate the Tailscale service.</help>
</field>
<field>
<id>settings.loginTimeout</id>
<label>Login timeout</label>
<type>text</type>
<advanced>true</advanced>
<help>Maximum time to wait for successful login, in seconds. Set to 0 to wait indefinitely, however this may prevent OPNsense booting completely if the Tailscale control plane is unavailable. Default is 10 seconds.</help>
</field>
<field>
<id>settings.listenPort</id>
<label>Listen Port</label>
<type>text</type>
<type>text</type>
<help>UDP port to listen on for WireGuard and peer-to-peer traffic.</help>
</field>
<field>

4
security/tailscale/src/opnsense/mvc/app/models/OPNsense/Tailscale/Settings.xml
View file

@ -6,6 +6,10 @@
<default>0</default>
<Required>Y</Required>
</enabled>
<loginTimeout type="IntegerField">
<default>10</default>
<Required>Y</Required>
</loginTimeout>
<listenPort type="PortField">
<default>41641</default>
<Required>Y</Required>

1
security/tailscale/src/opnsense/service/templates/OPNsense/Tailscale/rc.conf.d
View file

@ -10,6 +10,7 @@ tailscaled_enable="YES"
tailscaled_port="{{ OPNsense.tailscale.settings.listenPort }}"
{% endif %}
{% set up_args = [] %}
{% do up_args.append("--timeout=" + OPNsense.tailscale.settings.loginTimeout + "s") %}
{% if helpers.exists('OPNsense.tailscale.settings.advertiseExitNode') and OPNsense.tailscale.settings.advertiseExitNode|default("0") == "1" %}
{% do up_args.append("--advertise-exit-node") %}
{% else %}