Полный продакшн-фикс: hardened build/install, drift/firewall/wg проверки и актуализация документации

2026-05-10 15:41:44 +05:00
parent 535c1dbc33
commit b3dad5974c
11 changed files with 410 additions and 67 deletions
@@ -28,11 +28,13 @@ pub fn discover_peers_with_transport(
 ) -> anyhow::Result<Vec<Peer>> {
    let primary = transport
        .run(&["wg", "show", "all", "allowed-ips"])
-        .unwrap_or_default();
+        .map_err(|e| anyhow::anyhow!("wg show all allowed-ips failed: {e}"))?;

    let mut peers = parse_allowed_ips(&primary, peer_cidr)?;
    if peers.is_empty() {
-        let fallback = transport.run(&["wg", "show"]).unwrap_or_default();
+        let fallback = transport
+            .run(&["wg", "show"])
+            .map_err(|e| anyhow::anyhow!("wg show fallback failed: {e}"))?;
        peers = parse_fallback_wg_show(&fallback, peer_cidr)?;
    }