Method buildSyncDiff

backend/wireguard/user_common.go:51–137

(
	existingPeers map[string]*PeerInfo,
	desiredPeers map[string]*DesiredPeer,
)

}

func (wg *WireGuard) buildSyncDiff(
	existingPeers map[string]*PeerInfo,
	desiredPeers map[string]*DesiredPeer,
) (*SyncDiff, error) {
	targetPeers := make(map[string]*PeerInfo, len(desiredPeers))
	for key, desired := range desiredPeers {
		targetPeers[key] = &PeerInfo{
			Email:      desired.Email,
			PublicKey:  desired.ParsedKey,
			AllowedIPs: desired.AllowedIPNets,
		}
	}

	removeSet := make(map[string]*PeerInfo)
	upsertByKey := make(map[string]*PeerInfo)
	var peerConfigs []wgtypes.PeerConfig
	psk, _ := wg.config.GetPreSharedKey()
	for key, existing := range existingPeers {
		target, exists := targetPeers[key]
		if !exists {
			removeSet[key] = existing
			continue
		}

		ipnetsEqual := true
		if len(existing.AllowedIPs) != len(target.AllowedIPs) {
			ipnetsEqual = false
		} else {
			for i := range existing.AllowedIPs {
				if existing.AllowedIPs[i].String() != target.AllowedIPs[i].String() {
					ipnetsEqual = false
					break
				}
			}
		}

		if existing.Email != target.Email || !ipnetsEqual {
			if !ipnetsEqual {
				config, err := buildAddConfigFromPeerInfo(target, psk)
				if err != nil {
					log.Printf("quarantining peer update %s due to config error: %v", target.Email, err)
					continue
				}
				config.ReplaceAllowedIPs = true
				peerConfigs = append(peerConfigs, config)
			}
			upsertByKey[key] = target
		}
	}

	for key, target := range targetPeers {
		if _, exists := existingPeers[key]; !exists {
			config, err := buildAddConfigFromPeerInfo(target, psk)
			if err != nil {
				log.Printf("quarantining peer %s due to config error: %v", target.Email, err)
				continue
			}
			upsertByKey[key] = target