Method syncUsersFull

backend/wireguard/user_full_sync.go:9–55

(users []*common.User)

)

func (wg *WireGuard) syncUsersFull(users []*common.User) error {
	normalizedUsers := normalizeUsers(users)
	existingByKey := wg.buildExistingPeersByKeySnapshot()

	desiredPeers, err := wg.collectDesiredPeers(normalizedUsers)
	if err != nil {
		return err
	}

	diff, err := wg.buildSyncDiff(existingByKey, desiredPeers)
	if err != nil {
		return err
	}

	if !diff.Changed {
		return nil
	}

	psk, _ := wg.config.GetPreSharedKey()
	peerConfigs, appliedKeys := buildTargetPeerConfigs(diff.TargetPeers, psk)

	wg.mu.RLock()
	if err := wg.ensureRunningWithManagerLocked(); err != nil {
		wg.mu.RUnlock()
		return err
	}
	manager := wg.manager
	wg.mu.RUnlock()

	if err := manager.ApplyPeersReplaceAll(peerConfigs); err != nil {
		return fmt.Errorf("failed to apply full peer snapshot: %w", err)
	}

	var validTargetPeers []*PeerInfo
	for key, peer := range diff.TargetPeers {
		if _, ok := appliedKeys[key]; ok {
			validTargetPeers = append(validTargetPeers, peer)
		}
	}

	removedKeys := wg.peerStore.ReplaceAll(validTargetPeers)
	for _, key := range removedKeys {
		wg.statsTracker.RemoveStats(key)
	}

	return nil
}

func (wg *WireGuard) buildExistingPeersByKeySnapshot() map[string]*PeerInfo {
	existingPeers := wg.peerStore.GetAll()