+ <%= render FzHttpWeb.SharedView, "flash.html", assigns %>
+
+
+
+ Firezone periodically checks for WAN connectivity to the Internet and logs
+ the result here. This is used to determine the public IP address of this
+ server for populating the default endpoint field in device configurations.
+
+
+
+
+ Checked At
+ Resolved IP
+ Status
+
+
+
+ <%= for connectivity_check <- @connectivity_checks do %>
+
+
+ …
+
+ <%= connectivity_check.response_body %>
+
+
+
+
+
+ <% end %>
+
+
+
diff --git a/apps/fz_http/lib/fz_http_web/live/connectivity_check_live/index_live.ex b/apps/fz_http/lib/fz_http_web/live/connectivity_check_live/index_live.ex
new file mode 100644
index 000000000..e7edfe244
--- /dev/null
+++ b/apps/fz_http/lib/fz_http_web/live/connectivity_check_live/index_live.ex
@@ -0,0 +1,20 @@
+defmodule FzHttpWeb.ConnectivityCheckLive.Index do
+ @moduledoc """
+ Manages the connectivity_checks view.
+ """
+ use FzHttpWeb, :live_view
+
+ alias FzHttp.ConnectivityChecks
+
+ @impl Phoenix.LiveView
+ def mount(params, session, socket) do
+ {:ok,
+ socket
+ |> assign_defaults(params, session, &load_data/2)
+ |> assign(:page_title, "Connectivity Checks")}
+ end
+
+ defp load_data(_params, socket) do
+ assign(socket, :connectivity_checks, ConnectivityChecks.list_connectivity_checks(limit: 20))
+ end
+end
diff --git a/apps/fz_http/lib/fz_http_web/live/device_live/form_component.ex b/apps/fz_http/lib/fz_http_web/live/device_live/form_component.ex
index e958bab8a..fa5163087 100644
--- a/apps/fz_http/lib/fz_http_web/live/device_live/form_component.ex
+++ b/apps/fz_http/lib/fz_http_web/live/device_live/form_component.ex
@@ -4,17 +4,32 @@ defmodule FzHttpWeb.DeviceLive.FormComponent do
"""
use FzHttpWeb, :live_component
- alias FzHttp.Devices
+ alias FzHttp.{ConnectivityChecks, Devices, Settings}
def update(assigns, socket) do
- changeset = Devices.change_device(assigns.device)
+ device = assigns.device
+ changeset = Devices.change_device(device)
+ default_device_endpoint = Settings.default_device_endpoint() || ConnectivityChecks.endpoint()
{:ok,
socket
|> assign(assigns)
+ |> assign(Devices.defaults(changeset))
+ |> assign(:default_device_allowed_ips, Settings.default_device_allowed_ips())
+ |> assign(:default_device_dns_servers, Settings.default_device_dns_servers())
+ |> assign(:default_device_endpoint, default_device_endpoint)
|> assign(:changeset, changeset)}
end
+ def handle_event("change", %{"device" => device_params}, socket) do
+ changeset = Devices.change_device(socket.assigns.device, device_params)
+
+ {:noreply,
+ socket
+ |> assign(:changeset, changeset)
+ |> assign(Devices.defaults(changeset))}
+ end
+
def handle_event("save", %{"device" => device_params}, socket) do
device = socket.assigns.device
diff --git a/apps/fz_http/lib/fz_http_web/live/device_live/form_component.html.heex b/apps/fz_http/lib/fz_http_web/live/device_live/form_component.html.heex
index a4f5288c0..3c4477a0e 100644
--- a/apps/fz_http/lib/fz_http_web/live/device_live/form_component.html.heex
+++ b/apps/fz_http/lib/fz_http_web/live/device_live/form_component.html.heex
@@ -1,8 +1,7 @@
- <.form let={f} for={@changeset} id="edit-device" phx-target={@myself} phx-submit="save">
+ <.form let={f} for={@changeset} id="edit-device" phx-change="change" phx-target={@myself} phx-submit="save">
<%= label f, :name, class: "label" %>
-
<%= text_input f, :name, class: "input" %>
@@ -12,10 +11,26 @@
- <%= label f, :allowed_ips, "Allowed IPs", class: "label" %>
-
+ <%= label f, :use_default_allowed_ips, "Use Default Allowed IPs", class: "label" %>
- <%= text_input f, :allowed_ips, class: "input" %>
+
+ <%= radio_button f, :use_default_allowed_ips, true %>
+ Yes
+
+
+ <%= radio_button f, :use_default_allowed_ips, false %>
+ No
+
+
+
+ Default: <%= @default_device_allowed_ips %>
+
+
+
+
+ <%= label f, :allowed_ips, "Allowed IPs", class: "label" %>
+
+ <%= text_input f, :allowed_ips, class: "input", disabled: @use_default_allowed_ips %>
<%= error_tag f, :allowed_ips %>
@@ -23,16 +38,60 @@
- <%= label f, :dns_servers, "DNS Servers", class: "label" %>
-
+ <%= label f, :use_default_dns_servers, "Use Default DNS Servers", class: "label" %>
- <%= text_input f, :dns_servers, class: "input" %>
+
+ <%= radio_button f, :use_default_dns_servers, true %>
+ Yes
+
+
+ <%= radio_button f, :use_default_dns_servers, false %>
+ No
+
+
+
+ Default: <%= @default_device_dns_servers %>
+
+
+
+
+ <%= label f, :dns_servers, "DNS Servers", class: "label" %>
+
+ <%= text_input f, :dns_servers, class: "input", disabled: @use_default_dns_servers %>
<%= error_tag f, :dns_servers %>
+
+ <%= label f, :use_default_endpoint, "Use Default Endpoint", class: "label" %>
+
+
+ <%= radio_button f, :use_default_endpoint, true %>
+ Yes
+
+
+ <%= radio_button f, :use_default_endpoint, false %>
+ No
+
+
+
+ Default: <%= @default_device_endpoint %>
+
+
+
+
+ <%= label f, :endpoint, "Server Endpoint", class: "label" %>
+
The IP of the server this device should connect to.
+
+ <%= text_input f, :endpoint, class: "input", disabled: @use_default_endpoint %>
+
+
+ <%= error_tag f, :endpoint %>
+
+
+
<%= label f, :address, "Interface Address (last octet only)", class: "label" %>
diff --git a/apps/fz_http/lib/fz_http_web/live/device_live/show.html.heex b/apps/fz_http/lib/fz_http_web/live/device_live/show.html.heex
index 157d8409b..93a44505d 100644
--- a/apps/fz_http/lib/fz_http_web/live/device_live/show.html.heex
+++ b/apps/fz_http/lib/fz_http_web/live/device_live/show.html.heex
@@ -34,10 +34,13 @@
Allowed IPs
-
<%= @device.allowed_ips %>
+
<%= @allowed_ips %>
DNS Servers
-
<%= @device.dns_servers %>
+
<%= @dns_servers || "None" %>
+
+
Endpoint
+
<%= @endpoint %>
Public key <%= @device.public_key %>
@@ -88,12 +91,12 @@
[Interface]
PrivateKey = <%= @device.private_key %>
Address = <%= FzHttp.Devices.ipv4_address(@device) %>/32, <%= FzHttp.Devices.ipv6_address(@device) %>/128
-DNS = <%= @device.dns_servers %>
+<%= @dns_servers %>
[Peer]
PublicKey = <%= @device.server_public_key %>
-AllowedIPs = <%= @device.allowed_ips %>
-Endpoint = <%= @wireguard_endpoint %>:<%= @wireguard_port %>
+AllowedIPs = <%= @allowed_ips %>
+Endpoint = <%= @endpoint %>:<%= @wireguard_port %>
Or scan the QR code with your mobile phone:
diff --git a/apps/fz_http/lib/fz_http_web/live/device_live/show_live.ex b/apps/fz_http/lib/fz_http_web/live/device_live/show_live.ex
index 021fb9d96..2f7ac4ef4 100644
--- a/apps/fz_http/lib/fz_http_web/live/device_live/show_live.ex
+++ b/apps/fz_http/lib/fz_http_web/live/device_live/show_live.ex
@@ -51,11 +51,34 @@ defmodule FzHttpWeb.DeviceLive.Show do
device: device,
user: Users.get_user!(device.user_id),
page_title: device.name,
- wireguard_endpoint: Application.fetch_env!(:fz_vpn, :wireguard_endpoint),
+ allowed_ips: Devices.allowed_ips(device),
+ dns_servers: dns_servers(device),
+ endpoint: Devices.endpoint(device),
wireguard_port: Application.fetch_env!(:fz_vpn, :wireguard_port)
)
else
not_authorized(socket)
end
end
+
+ defp dns_servers(device) when is_struct(device) do
+ dns_servers = Devices.dns_servers(device)
+
+ if dns_servers_empty?(dns_servers) do
+ ""
+ else
+ "DNS = #{dns_servers}"
+ end
+ end
+
+ defp dns_servers_empty?(nil), do: true
+
+ defp dns_servers_empty?(dns_servers) when is_binary(dns_servers) do
+ len =
+ dns_servers
+ |> String.trim()
+ |> String.length()
+
+ len == 0
+ end
end
diff --git a/apps/fz_http/lib/fz_http_web/live/setting_live/default.html.heex b/apps/fz_http/lib/fz_http_web/live/setting_live/default.html.heex
new file mode 100644
index 000000000..07bf027ed
--- /dev/null
+++ b/apps/fz_http/lib/fz_http_web/live/setting_live/default.html.heex
@@ -0,0 +1,49 @@
+<%= render FzHttpWeb.SharedView, "heading.html", page_title: @page_title %>
+
+
+ <%= render FzHttpWeb.SharedView, "flash.html", assigns %>
+
+
+
+
+
+
+
+ <%= live_component(
+ @socket,
+ FzHttpWeb.SettingLive.FormComponent,
+ label_text: "Allowed IPs",
+ placeholder: nil,
+ changeset: @changesets["default.device.allowed_ips"],
+ help_text: @help_texts.allowed_ips,
+ id: :allowed_ips_form_component) %>
+
+
+
+
+
+
diff --git a/apps/fz_http/lib/fz_http_web/live/setting_live/default_live.ex b/apps/fz_http/lib/fz_http_web/live/setting_live/default_live.ex
new file mode 100644
index 000000000..60e63919f
--- /dev/null
+++ b/apps/fz_http/lib/fz_http_web/live/setting_live/default_live.ex
@@ -0,0 +1,46 @@
+defmodule FzHttpWeb.SettingLive.Default do
+ @moduledoc """
+ Manages the defaults view.
+ """
+ use FzHttpWeb, :live_view
+
+ alias FzHttp.{ConnectivityChecks, Settings}
+
+ @help_texts %{
+ allowed_ips: """
+ Configures the default AllowedIPs setting for devices.
+ AllowedIPs determines which destination IPs get routed through
+ Firezone. Specify a comma-separated list of IPs or CIDRs here to achieve split tunneling, or use
+ 0.0.0.0/0, ::/0 to route all device traffic through this Firezone server.
+ """,
+ dns_servers: """
+ Comma-separated list of DNS servers to use for devices.
+ Leaving this blank will omit the DNS section in
+ generated device configs.
+ """,
+ endpoint: """
+ IPv4 or IPv6 address that devices will be configured to connect
+ to. Defaults to this server's public IP if not set.
+ """
+ }
+
+ @impl Phoenix.LiveView
+ def mount(params, session, socket) do
+ {:ok,
+ socket
+ |> assign_defaults(params, session)
+ |> assign(:help_texts, @help_texts)
+ |> assign(:changesets, load_changesets())
+ |> assign(:endpoint_placeholder, endpoint_placeholder())
+ |> assign(:page_title, "Default Settings")}
+ end
+
+ defp endpoint_placeholder do
+ ConnectivityChecks.endpoint()
+ end
+
+ defp load_changesets do
+ Settings.to_list("default.")
+ |> Map.new(fn setting -> {setting.key, Settings.change_setting(setting)} end)
+ end
+end
diff --git a/apps/fz_http/lib/fz_http_web/live/setting_live/form_component.ex b/apps/fz_http/lib/fz_http_web/live/setting_live/form_component.ex
new file mode 100644
index 000000000..2994ab7af
--- /dev/null
+++ b/apps/fz_http/lib/fz_http_web/live/setting_live/form_component.ex
@@ -0,0 +1,62 @@
+defmodule FzHttpWeb.SettingLive.FormComponent do
+ @moduledoc """
+ Handles updating setting values, one at a time
+ """
+ use FzHttpWeb, :live_component
+
+ alias FzHttp.Settings
+
+ @impl Phoenix.LiveComponent
+ def update(assigns, socket) do
+ {:ok,
+ socket
+ |> assign(:input_class, "input")
+ |> assign(:form_changed, false)
+ |> assign(:input_icon, "")
+ |> assign(assigns)}
+ end
+
+ @impl Phoenix.LiveComponent
+ def handle_event("save", %{"setting" => %{"value" => value}}, socket) do
+ key = socket.assigns.changeset.data.key
+
+ case Settings.update_setting(key, value) do
+ {:ok, setting} ->
+ {:noreply,
+ socket
+ |> assign(:input_class, input_class(false))
+ |> assign(:input_icon, input_icon(false))
+ |> assign(:changeset, Settings.change_setting(setting, %{}))}
+
+ {:error, changeset} ->
+ {:noreply,
+ socket
+ |> assign(:input_class, input_class(true))
+ |> assign(:input_icon, input_icon(true))
+ |> assign(:changeset, changeset)}
+ end
+ end
+
+ @impl Phoenix.LiveComponent
+ def handle_event("change", _params, socket) do
+ {:noreply,
+ socket
+ |> assign(:form_changed, true)}
+ end
+
+ defp input_icon(false) do
+ "mdi mdi-check-circle"
+ end
+
+ defp input_icon(true) do
+ "mdi mdi-alert-circle"
+ end
+
+ defp input_class(false) do
+ "input is-success"
+ end
+
+ defp input_class(true) do
+ "input is-danger"
+ end
+end
diff --git a/apps/fz_http/lib/fz_http_web/live/setting_live/form_component.html.heex b/apps/fz_http/lib/fz_http_web/live/setting_live/form_component.html.heex
new file mode 100644
index 000000000..bf09b6d72
--- /dev/null
+++ b/apps/fz_http/lib/fz_http_web/live/setting_live/form_component.html.heex
@@ -0,0 +1,26 @@
+
+ <.form let={f} for={@changeset} id={@id} phx-target={@myself} phx-change="change" phx-submit="save">
+
+ <%= label f, :value, @label_text, class: "label" %>
+
+
+ <%= text_input f, :value, placeholder: @placeholder, class: @input_class %>
+
+
+
+ <%= error_tag f, :value %>
+
+
+ <%= raw @help_text %>
+
+
+ <%= if @form_changed do %>
+
+ <%= submit "Save", class: "button is-primary" %>
+
+ <% end %>
+
+
+
+
@@ -44,8 +40,8 @@
<%= link(to: Routes.account_show_path(@conn, :show), class: "navbar-item") do %>
- Settings
+ Account Settings
<% end %>
<%= link(to: Routes.device_index_path(@conn, :index), class: nav_class(@conn.request_path, "devices")) do %>
-
@@ -91,6 +87,12 @@
+
+
@@ -109,7 +120,7 @@
<%= link(to: "mailto:" <> feedback_recipient()) do %>
- Leave us feedback!
+ Click here to leave feedback
<% end %>
@@ -129,7 +140,5 @@
-
-