middleware

func WireGuardMiddlewareWithInterface ¶

func WireGuardMiddlewareWithInterface(wireGuardInterface string, wireGuardCIDR string) func(http.Handler) http.Handler

WireGuardMiddlewareWithInterface enforces policies based on the client's IP and the WireGuard subnet. It allows requests if the CLIENT IP is either: 1. In the WireGuard subnet (e.g., 100.97.0.0/16), OR 2. Arriving on the specified WireGuard interface

This ensures that nodes can access cloud-init either: - Through their WireGuard tunnel (client IP in WireGuard subnet) - Directly on the server's WireGuard interface

func WireGuardMiddlewareWithProxy ¶

func WireGuardMiddlewareWithProxy(wireGuardCIDR string, allow bool) func(http.Handler) http.Handler

WireGuardMiddlewareWithProxy creates a middleware to enforce WireGuard policy.