feat: wireguard implementation

Author: M03ED

.env.example

@@ -20,3 +20,5 @@ API_KEY = xxxxxxxx-yyyy-zzzz-mmmm-aaaaaaaaaaa
 # GENERATED_CONFIG_PATH = /var/lib/pg-node/generated
 # LOG_BUFFER_SIZE = 10000
 # STARTUP_LOG_TAIL_SIZE = 200
+# STATS_UPDATE_INTERVAL_SECONDS = 10
+# STATS_CLEANUP_INTERVAL_SECONDS = 300

.github/workflows/docker-build-dev.yml

@@ -19,18 +19,18 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Login to Docker Hub
-        uses: docker/login-action@v2
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-  
       - name: Log in to the Container registry
         uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -43,7 +43,7 @@ jobs:
           platforms: linux/amd64,linux/arm64
           push: true
           tags: |
-            ${{env.IMAGE}}
             ${{env.GHCR_IMAGE}}
+            ${{env.IMAGE}}
           cache-from: type=gha
           cache-to: type=gha,mode=max

.github/workflows/docker-build.yml

@@ -63,4 +63,4 @@ jobs:
           push: true
           tags: ${{ env.DOCKER_TAGS }}
           labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
+          cache-from: type=gha

.github/workflows/run-tests.yml

@@ -3,14 +3,17 @@ name: Test Modules
 on:
   pull_request:
     branches:
-      - '*'
+      - "**"
   push:
     branches:
-      - 'dev'
+      - "dev"
+      - "wg"
 
 jobs:
   test:
     runs-on: ubuntu-latest
+    env:
+      GOTOOLCHAIN: auto
 
     steps:
       - name: Checkout codebase
@@ -19,7 +22,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: '1.25.7'
+          go-version: "1.25.7"
           check-latest: true
 
       - name: Get project dependencies
@@ -28,11 +31,17 @@ jobs:
       - name: Install xray-core
         run: make install_xray
 
+      - name: install wg
+        run: make install_wg
+
       - name: Create certificate
         run: |
-          mkdir certs
+          mkdir -p certs
           make generate_server_cert
           make generate_client_cert
 
-      - name: Run tests
-        run: make test
+      - name: Run regular test suite
+        run: TEST_INTEGRATION=true go test ./... -v -p 1
+
+      - name: Run wireguard integration tests
+        run: sudo -E make test-integration-wireguard

.gitignore

@@ -27,4 +27,5 @@ xray-core/
 *.env
 *.temp
 
+# AI
 .AI

Dockerfile

@@ -18,6 +18,8 @@ FROM alpine:latest
 
 LABEL org.opencontainers.image.source="https://github.com/PasarGuard/node"
 
+RUN apk update && apk add --no-cache wireguard-tools
+
 WORKDIR /app
 COPY --from=builder /src /app
 COPY --from=builder /usr/local/bin/xray /usr/local/bin/xray

Dockerfile.wireguard

@@ -0,0 +1,25 @@
+FROM --platform=$BUILDPLATFORM golang:1.25.7-alpine AS builder
+
+ARG TARGETOS
+ARG TARGETARCH
+
+RUN apk update && apk add --no-cache make
+
+WORKDIR /src
+
+COPY go* .
+RUN go mod download
+
+COPY . .
+RUN CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} make NAME=main build
+
+FROM alpine:latest
+
+LABEL org.opencontainers.image.source="https://github.com/PasarGuard/node"
+
+RUN apk update && apk add --no-cache wireguard-tools
+
+WORKDIR /app
+COPY --from=builder /src /app
+
+ENTRYPOINT ["./main"]

Dockerfile.xray

@@ -0,0 +1,26 @@
+FROM --platform=$BUILDPLATFORM golang:1.25.7-alpine AS builder
+
+ARG TARGETOS
+ARG TARGETARCH
+
+RUN apk update && apk add --no-cache make
+
+WORKDIR /src
+
+COPY go* .
+RUN go mod download
+
+COPY . .
+RUN CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} make NAME=main build
+RUN GOOS=${TARGETOS} GOARCH=${TARGETARCH} make install_xray
+
+FROM alpine:latest
+
+LABEL org.opencontainers.image.source="https://github.com/PasarGuard/node"
+
+WORKDIR /app
+COPY --from=builder /src /app
+COPY --from=builder /usr/local/bin/xray /usr/local/bin/xray
+COPY --from=builder /usr/local/share/xray /usr/local/share/xray
+
+ENTRYPOINT ["./main"]

Makefile

@@ -38,7 +38,7 @@ ifeq ($(shell echo "$(GOARCH)" | grep -Eq "(mips|mipsle)" && echo true),true)
 ADDITION = GOMIPS=softfloat go build -o $(NAME)_softfloat -trimpath -ldflags "$(LDFLAGS)" -v $(MAIN)
 endif
 
-.PHONY: clean build
+.PHONY: clean build test test-race-wireguard test-integration test-integration-full test-integration-wireguard
 
 build:
 	CGO_ENABLED=0 go build -o $(OUTPUT) $(PARAMS) $(MAIN)
@@ -129,11 +129,47 @@ else
 	@exit 1
 endif
 
+install_wg: update_os
+ifeq ($(UNAME_S),Linux)
+	@echo "Installing WireGuard for $(DISTRO)..."
+	if [ "$(DISTRO)" = "debian" ] || [ "$(DISTRO)" = "ubuntu" ]; then \
+		sudo apt-get update && sudo apt-get install -y wireguard wireguard-tools; \
+	elif [ "$(DISTRO)" = "centos" ] || [ "$(DISTRO)" = "rhel" ]; then \
+		sudo yum install -y epel-release && sudo yum install -y wireguard-tools; \
+	elif [ "$(DISTRO)" = "fedora" ]; then \
+		sudo dnf install -y wireguard-tools; \
+	elif [ "$(DISTRO)" = "arch" ] || [ "$(DISTRO)" = "manjaro" ]; then \
+		sudo pacman -Sy --noconfirm wireguard-tools; \
+	elif [ "$(DISTRO)" = "alpine" ]; then \
+		apk add --no-cache wireguard-tools; \
+	elif [ "$(DISTRO)" = "opensuse" ] || [ "$(DISTRO)" = "opensuse-leap" ] || [ "$(DISTRO)" = "opensuse-tumbleweed" ]; then \
+		sudo zypper install -y wireguard-tools; \
+	else \
+		echo "Unsupported distribution: $(DISTRO)"; \
+		exit 1; \
+	fi
+	@echo "WireGuard installed successfully"
+	@wg --version
+else
+	@echo "Unsupported operating system: $(UNAME_S)"
+	@exit 1
+endif
+
 test-integration:
-	TEST_INTEGRATION=true go test ./... -v -p 1
+	$(MAKE) test-integration-full
+
+test-integration-full:
+	GOTOOLCHAIN=auto TEST_INTEGRATION=true go test ./... -v -p 1
+	GOTOOLCHAIN=auto go test -tags=integration -v -p 1 ./backend/wireguard
+
+test-integration-wireguard:
+	GOTOOLCHAIN=auto go test -tags=integration -v -p 1 ./backend/wireguard
 
 test:
-	TEST_INTEGRATION=false go test ./... -v -p 1
+	GOTOOLCHAIN=auto TEST_INTEGRATION=false go test ./... -v -p 1
+
+test-race-wireguard:
+	GOTOOLCHAIN=auto CGO_ENABLED=1 go test -race -v -p 1 ./backend/wireguard
 
 serve:
 	go run main.go serve

backend/backend.go

@@ -9,7 +9,7 @@ import (
 type Backend interface {
 	Started() bool
 	Version() string
-	Logs() chan string
+	Logs() <-chan string
 	Restart() error
 	Shutdown()
 	SyncUser(context.Context, *common.User) error