Method InitializeWithPeers

backend/wireguard/manager.go:128–194

InitializeWithPeers sets up the WireGuard interface with initial configuration and optional full peer snapshot.

(privateKey wgtypes.Key, listenPort int, serverIPs []string, peers []wgtypes.PeerConfig)

// InitializeWithPeers sets up the WireGuard interface with initial configuration and optional full peer snapshot.
func (m *Manager) InitializeWithPeers(privateKey wgtypes.Key, listenPort int, serverIPs []string, peers []wgtypes.PeerConfig) error {
	m.mu.Lock()
	defer m.mu.Unlock()

	if m.client == nil {
		return fmt.Errorf("wgctrl client is not initialized")
	}

	nl := m.getNetlinkOps()
	configure := m.getConfigureDevice()

	var parsedAddrs []*netlink.Addr
	for _, ipStr := range serverIPs {
		addr, err := nl.ParseAddr(ipStr)
		if err != nil {
			return fmt.Errorf("failed to parse address %s: %w", ipStr, err)
		}
		parsedAddrs = append(parsedAddrs, addr)
	}

	// Clean up any existing interface
	if err := m.cleanupExistingInterface(); err != nil {
		return fmt.Errorf("failed to cleanup existing interface: %w", err)
	}

	// Create WireGuard interface
	link := &netlink.Wireguard{LinkAttrs: netlink.LinkAttrs{Name: m.iFaceName}}
	if err := nl.LinkAdd(link); err != nil {
		return fmt.Errorf("failed to add link: %w", wrapPermissionDeniedError("creating wireguard interface", err))
	}
	cleanupOnError := true
	defer func() {
		if cleanupOnError {
			_ = m.cleanupExistingInterface()
		}
	}()

	// Configure WireGuard (single call for base settings + optional peers snapshot).
	config := buildInitialWGConfig(privateKey, listenPort, peers)

	if err := configure(m.client, m.iFaceName, config); err != nil {
		return fmt.Errorf("failed to configure device: %w", wrapPermissionDeniedError("configuring wireguard device", err))
	}

	link2, err := nl.LinkByName(m.iFaceName)
	if err != nil {
		return fmt.Errorf("failed to get link: %w", err)
	}

	for _, addr := range parsedAddrs {
		if err := nl.AddrAdd(link2, addr); err != nil {
			return fmt.Errorf(
				"failed to add address %s: %w",
				addr.IPNet.String(),
				wrapPermissionDeniedError("assigning wireguard interface address", err),
			)
		}
	}