File Coverage

lib/Wireguard/WGmeta/Wrapper/Config.pm

Criterion	Covered	Total	%
statement	354	385	91.9
branch	84	114	73.6
condition	16	21	76.1
subroutine	40	43	93.0
pod	22	25	88.0
total	516	588	87.7

=pod

=head1 NAME

WGmeta::Wrapper::Config - Class for interfacing the wireguard configuration

=head1 SYNOPSIS

 use Wireguard::WGmeta::Wrapper::Config;
 my $wg_meta = Wireguard::WGmeta::Wrapper::Config->new('');

=head1 DESCRIPTION

This class provides wrapper-functions around a wireguard configuration parsed by L which
allow to edit, add and remove interfaces and peers.

=head1 CONCURRENCY

Please refer to L

=head1 EXAMPLES

 use Wireguard::WGmeta::Wrapper::Config;
 my $wg-meta = Wireguard::WGmeta::Wrapper::Config->new('');

 # set an attribute (non wg-meta attributes forwarded to the original `wg set` command)
 wg_meta->set('wg0', 'WG_0_PEER_A_PUBLIC_KEY', '', '');

 # set an alias for a peer
 wg_meta->set('wg0', 'WG_0_PEER_A_PUBLIC_KEY', 'alias', 'some_fancy_alias');

 # disable peer (this comments out the peer in the configuration file)
 wg_meta->disable('wg0', 'some_fancy_alias');

 # write config (if parameter is set to True, the config is overwritten, if set to False the resulting file is suffixed with '.not_applied'
 wg_meta->commit(1);

=head1 METHODS

=cut

use v5.20.0;
package Wireguard::WGmeta::Wrapper::Config;
use strict;
use warnings;
use experimental 'signatures';
use Wireguard::WGmeta::Wrapper::Bridge;
use Wireguard::WGmeta::Parser::Middleware;
use Wireguard::WGmeta::ValidAttributes;
use Wireguard::WGmeta::Utils;
use Wireguard::WGmeta::Parser::Conf qw(INTERNAL_KEY_PREFIX);

our $VERSION = "0.3.4"; # do not change manually, this variable is updated when calling make

use constant FALSE => 0;
use constant TRUE => 1;

=head3 new($wireguard_home [, $wg_meta_prefix, $wg_meta_disabled_prefix, $custom_attributes])

Creates a new instance of this class.

B

=over 1

=item *

C<$wireguard_home> Path to Wireguard configuration files. Make sure the path ends with a `/`.

=item *

C<[$wg_meta_prefix]> A custom wg-meta comment prefix, has to begin with either `;` or `#`.
It is recommended to not change this setting, especially in a already deployed installation.

=item *

C<[$wg_meta_disabled_prefix]> A custom prefix for the commented out (disabled) sections,
has to begin with either `;` or `#` and must not be equal with C<$wg_meta_prefix>! (This is enforced and an exception is thrown if violated)
It is recommended to not change this setting, especially in an already deployed installation.

=item *

C<[$not_applied_suffix]> Suffix to add if C is set to not override an existing config.

=item *

C<[$custom_attributes]> A reference to a hash defining custom attributes. Expects the following structure:

    {
        'attr_key'     => {
            'validator'      => 'Ref to validation function'
        },
        'example'         => {
            'validator'      => sub ($attr, $value) {
                return ($attr eq 'example') ? 1 : 0;
            }
        },
        ...
    }

=back

B

An instance of WGmeta::Wrapper::Config

=cut
sub new($class, $wireguard_home, $wg_meta_prefix = '#+', $wg_meta_disabled_prefix = '#-', $not_applied_suffix = '.not_applied', $custom_attributes = undef) {

    if ($wg_meta_prefix eq $wg_meta_disabled_prefix) {
        die '`$wg_meta_prefix` and `$wg_meta_disabled_prefix` have to be different';
    }

    my $self = {
        'wireguard_home'          => $wireguard_home,
        'wg_meta_prefix'          => $wg_meta_prefix,
        'wg_meta_disabled_prefix' => $wg_meta_disabled_prefix,
        'not_applied_suffix'      => $not_applied_suffix,
        'n_conf_files'            => {},
        'parsed_config'           => {},
        'reload_listeners'        => {},
        'custom_attributes'       => defined $custom_attributes ? $custom_attributes : {}
    };

    _read_configs_from_folder2($self);

    bless $self, $class;
    return $self;
}

sub _read_configs_from_folder2($self) {
    my ($all_dot_conf, $count) = get_all_conf_files($self->{wireguard_home});
    for my $possible_config_path (@{$all_dot_conf}) {
        my $interface = $possible_config_path;
        $interface =~ s/^\/|\\|.*\/|.*\\|.conf$//g;
        may_reload_from_disk($self, $interface, TRUE, TRUE, TRUE);
    }
}

=head3 set($interface, $identifier, $attribute, $value [, $unknown_callback])

Sets a value on a specific interface section. If C == C<$value> this sub is essentially a No-Op.

B

=over 1

=item *

C<$interface> Valid interface identifier (e.g 'wg0')

=item *

C<$identifier> Either an interface name, an alias or public-key of a peer

=item *

C<$attribute> Attribute name (case does matter!)

=item *

C<[$unknown_callback = undef]> A reference to a callback function which is fired when a previously unknown attribute is set.
Expected signature:

    sub my_unknown_callback($attribute, $value) {
        # Handling of this particular case
        return $attribute, $value;
    }

If not defined, a warning is emitted

=back

B

Exception if:

=over 1

=item *

Value is not defined

=item *

Interface is invalid

=item *

Identifier is invalid (also if alias translation fails)

=item *

Attribute is not valid for target section (Interface, Peer)

=item *

Validation for the attribute value fails

=back

B

None

=cut
sub set($self, $interface, $identifier, $attribute, $value, $unknown_callback = undef) {
    # Assertions
    die "Undefined value for `$attribute` in interface `$interface` NOT SET" unless defined($value);
    die "Invalid interface name `$interface`" unless $self->is_valid_interface($interface);
    $identifier = $self->try_translate_alias($interface, $identifier);
    die "Invalid identifier `$identifier` for interface `$interface`" unless $self->is_valid_identifier($interface, $identifier);
    my $attr_type = get_attr_type($attribute);
    if ($interface eq $identifier) {
        # We have an interface
        die "Attribute `$attribute` it not valid for the interface section" if $attr_type == ATTR_TYPE_IS_WG_ORIG_PEER;
    }
    else {
        die "Attribute `$attribute` is not valid for a peer section" if $attr_type == ATTR_TYPE_IS_WG_ORIG_INTERFACE or $attr_type == ATTR_TYPE_IS_WG_QUICK;
    }

    # skip if same value
    if (exists $self->{parsed_config}{$interface}{$identifier}{$attribute} && $self->{parsed_config}{$interface}{$identifier}{$attribute} eq $value) {
        return;
    }

    # Call attribute validation function
    die "Invalid attribute value `$value` for `$attribute`" unless $self->attr_value_is_valid($attribute, $value);

    unless (exists $self->{parsed_config}{$interface}{$identifier}{$attribute}) {

        if (not exists $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'observed_wg_meta_attrs'}{$attribute}) {
            if (exists KNOWN_ATTRIBUTES->{$attribute}) {
                # we have to first occurrence of a known but yet unseen wg-meta attribute
                $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'observed_wg_meta_attrs'}{$attribute} = 1 if KNOWN_ATTRIBUTES->{$attribute}{type} == ATTR_TYPE_IS_WG_META;
            }
            elsif (exists $self->{custom_attributes}{$attribute}) {
                # we have a registered custom attribute
                $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'observed_wg_meta_attrs'}{$attribute} = 1
            }
            else {
                # we have a completely new, unknown attribute
                if (defined $unknown_callback) {
                    ($attribute, $value) = &{$unknown_callback}($attribute, $value);
                }
                else {
                    warn "Attribute `$attribute` was previously not known on interface `$interface`";
                }
                $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'observed_wg_meta_attrs'}{$attribute} = 1;
            }
        }
        # the attribute does not (yet) exist in the configuration, lets add it to the list
        push @{$self->{parsed_config}{$interface}{$identifier}{INTERNAL_KEY_PREFIX . 'order'}}, $attribute;
    }
    if ($attribute eq 'alias') {
        $self->_update_alias_map($interface, $identifier, $value);
    }
    $self->{parsed_config}{$interface}{$identifier}{$attribute} = $value;
    $self->_set_changed($interface);
}

=head3 attr_value_is_valid($attribute, $value, $ref_valid_attrs)

Simply calls the C function defined in L or C<$custom_attributs>

B

=over 1

=item

C<$attribute> Attribute name

=item

C<$value> Attribute value

=back

B

True if validation was successful (or no validator function present), False if not.

=cut
sub attr_value_is_valid($self, $attribute, $value) {
    return &{KNOWN_ATTRIBUTES->{$attribute}{validator}}($value) if exists KNOWN_ATTRIBUTES->{$attribute};
    return &{$self->{custom_attributes}{$attribute}{validator}}($value) if exists $self->{custom_attributes}{$attribute};
    return 1;
}

sub _update_alias_map($self, $interface, $identifier, $alias) {
    unless (exists $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'alias_map'}{$alias}) {
        $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'alias_map'}{$alias} = $identifier;
    }
    else {
        die "Alias `$alias` is already defined on interface `$interface`";
    }
}


=head3 disable($interface, $identifier)

Disables an interface/peer and setting the wg-meta attribute `Disabled` to C<1>.

B

=over 1

=item *

C<$interface> Valid interface name (e.g 'wg0').

=item *

C<$identifier> A valid identifier (or alias): If the target section is a peer, this is usually the public key of this peer. If target is an interface,
its again the interface name.

=back

B

None

=cut
sub disable($self, $interface, $identifier,) {
    $self->_toggle($interface, $identifier, TRUE);
}

=head3 enable($interface, $identifier)

Inverse method if L

=cut
sub enable($self, $interface, $identifier) {
    $self->_toggle($interface, $identifier, FALSE);
}

# internal toggle method (DRY)
sub _toggle($self, $interface, $identifier, $enable) {
    $identifier = $self->try_translate_alias($interface, $identifier);
    # we can bypass an "expensive" set() here
    $self->{parsed_config}{$interface}{$identifier}{'disabled'} = $enable;
    $self->_set_changed($interface);
}

=head3 is_valid_interface($interface)

Checks if an interface name is valid (present in parsed config)

B

=over 1

=item

C<$interface> An interface name

=back

B

True if present, undef if not.

=cut
sub is_valid_interface($self, $interface) {
    return (exists $self->{parsed_config}{$interface});
}


=head3 is_valid_alias($interface, $alias)

Simply checks if an alias is valid for a given interface

=cut
sub is_valid_alias($self, $interface, $alias) {
    return exists $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'alias_map'}{$alias}
}

=head3 is_valid_identifier($interface, $identifier)

Checks if an identifier is valid for a given interface

B

=over 1

=item

C<$interface> An interface name

=item

C<$identifier> An identifier (no alias!)

=back

B

True if present, undef if not.

=cut
sub is_valid_identifier($self, $interface, $identifier) {
    return (exists $self->{parsed_config}{$interface}{$identifier});
}

=head3 try_translate_alias($interface, $may_alias)

Tries to translate an identifier (which may be an alias).
no exception is thrown on failure, instead the C<$may_alias> is returned.

B

=over 1

=item

C<$interface> A valid interface name

=item

C<$may_alias> An identifier which could be a valid alias for this interface

=back

B

If the alias is valid for the specified interface, the corresponding identifier is returned, else C<$may_alias>

=cut
sub try_translate_alias($self, $interface, $may_alias) {
    if (exists $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'alias_map'}{$may_alias}) {
        return $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'alias_map'}{$may_alias};
    }
    else {
        return $may_alias;
    }
}

=head3 get_all_conf_files($wireguard_home)

Returns a list of all files in C<$wireguard_home> matching I.

B

=over 1

=item

C<$wireguard_home> Path to a folder where wireguard configuration files are located

=back

B

A reference to a list with absolute paths to the config files (possibly empty)

=cut
sub get_all_conf_files($wireguard_home) {
    my @config_files = read_dir($wireguard_home, qr/.*\.conf$/);
    if (@config_files == 0) {
        die "No matching interface configuration(s) in " . $wireguard_home;
    }
    my $count = @config_files;
    return \@config_files, $count;
}


=head3 commit([$is_hot_config = FALSE, $no_checksum = FALSE])

Writes down the parsed config to the wireguard configuration folder

B

=over 1

=item

C<[$is_hot_config = FALSE])> If set to TRUE, the existing configuration is overwritten (and possibly existing, not applied configs are deleted). Otherwise,
the suffix '.not_applied' is appended to the filename

=item

C<[$no_checksum = FALSE])> If set to TRUE, no checksum is written

=back

B

Exception if: Folder or file is not writeable

B

None

=cut
sub commit($self, $is_hot_config = FALSE, $no_checksum = FALSE) {
    for my $interface (keys %{$self->{parsed_config}}) {
        if ($self->_has_changed($interface)) {
            my $new_config = create_wg_config2($self->{parsed_config}{$interface}, $self->{wg_meta_prefix}, $self->{wg_meta_disabled_prefix}, $no_checksum);
            my $fh;
            my $hot_path = $self->{wireguard_home} . $interface . '.conf';
            my $safe_path = $self->{wireguard_home} . $interface . $self->{not_applied_suffix};
            if ($is_hot_config == TRUE) {
                open $fh, '>', $hot_path or die $!;
                $self->{parsed_config}->{$interface}{INTERNAL_KEY_PREFIX . 'is_hot_config'} = 1;
            }
            else {
                open $fh, '>', $safe_path or die $!;
                $self->{parsed_config}->{$interface}{INTERNAL_KEY_PREFIX . 'is_hot_config'} = 0;
            }
            # write down to file
            print $fh $new_config;
            $self->_reset_changed($interface);
            close $fh or die $!;

            # if there is an not applied version around delete it (if is_hot_config = True)
            if (-e $safe_path && $is_hot_config) {
                unlink $safe_path;
            }
            # Notify listeners about a file change
            $self->_call_reload_listeners($interface);
        }
    }
}


=head3 get_interface_list()

Return a list of all interfaces.

B

A list of all valid interface names. If no interfaces are available, an empty list is returned

=cut
sub get_interface_list($self) {
    return sort keys %{$self->{parsed_config}};
}

=head3 get_interface_section($interface, $identifier)

Returns a hash representing a section of a given interface

B

=over 1

=item *

C<$interface> Valid interface name

=item *

C<$identifier> Valid section identifier

=back

B

A hash containing the requested section. If the requested section/interface is not present, an empty hash is returned.

=cut
sub get_interface_section($self, $interface, $identifier) {
    $identifier = $self->try_translate_alias($interface, $identifier);
    if (exists $self->{parsed_config}{$interface}{$identifier}) {
        my %r = %{$self->{parsed_config}{$interface}{$identifier}};
        return %r;
    }
    else {
        return ();
    }
}

=head3 get_section_list($interface)

Returns a list of valid sections of an interface (ordered as in the original config file).

B

=over 1

=item *

C<$interface> A valid interface name

=back

B

A list of all sections of an interface. If interface is not present, an empty list is returned.

=cut
sub get_section_list($self, $interface) {
    if ($self->is_valid_interface($interface)) {
        return @{$self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'section_order'}};
    }
    else {
        return ();
    }
}

sub get_wg_meta_prefix($self) {
    return $self->{wg_meta_prefix};
}

sub get_disabled_prefix($self) {
    return $self->{wg_meta_disabled_prefix};
}

=head3 add_interface($interface_name, $ip_address, $listen_port, $private_key)

Adds a (minimally configured) interface. If more attributes are needed, please set them using the C method.

B No validation is performed on the values!

B

=over 1

=item *

C<$interface_name> A new interface name, must be unique.

=item *

C<$ip_address> A string describing the ip net(s) (e.g '10.0.0.0/24, fdc9:281f:04d7:9ee9::2/64')

=item *

C<$listen_port> The listen port for this interface.

=item *

C<$private_key> A private key for this interface

=back

B

An exception if the interface name already exists.

B

None

=cut
sub add_interface($self, $interface_name, $ip_address, $listen_port, $private_key) {
    if ($self->is_valid_interface($interface_name)) {
        die "Interface `$interface_name` already exists";
    }
    my %interface = (
        'address'                     => $ip_address,
        'listen-port'                 => $listen_port,
        'private-key'                 => $private_key,
        INTERNAL_KEY_PREFIX . 'type'  => 'Interface',
        INTERNAL_KEY_PREFIX . 'order' => [ 'address', 'listen-port', 'private-key' ]
    );
    $self->{parsed_config}{$interface_name}{$interface_name} = \%interface;
    $self->{parsed_config}{$interface_name}{INTERNAL_KEY_PREFIX . 'alias_map'} = {};
    $self->{parsed_config}{$interface_name}{INTERNAL_KEY_PREFIX . 'section_order'} = [ $interface_name ];
    $self->{parsed_config}{$interface_name}{checksum} = 'none';
    $self->{parsed_config}{$interface_name}{INTERNAL_KEY_PREFIX . 'mtime'} = 0.0;
    $self->{parsed_config}{$interface_name}{INTERNAL_KEY_PREFIX . 'config_path'} = $self->{wireguard_home} . $interface_name . '.conf';
    $self->{parsed_config}{$interface_name}{has_changed} = 1;

}

=head3 add_peer($interface, $ip_address, $public_key [, $alias, $preshared_key])

Adds a peer to an exiting interface.

B

=over 1

=item *

C<$interface> A valid interface.

=item *

C<$ip_address> A string describing the ip-address(es) of this this peer.

=item *

C<$public_key> Public-key for this interface. This becomes the identifier of this peer.

=item *

C<[$preshared_key]> Optional argument defining the psk.

=item *

C<[$alias]> Optional argument defining an alias for this peer (wg-meta)

=back

B

An exception if either the interface is invalid, the alias is already assigned or the public-key is
already present on an other peer.

B

A tuple consisting of the iface private-key and listen port

=cut
sub add_peer($self, $interface, $ip_address, $public_key, $alias = undef, $preshared_key = undef) {
    # generate new key pair if not defined
    if ($self->is_valid_interface($interface)) {
        if ($self->is_valid_identifier($interface, $public_key)) {
            die "An interface with this public-key already exists on `$interface`";
        }
        # generate peer config
        my %peer = ();
        $self->{parsed_config}{$interface}{$public_key} = \%peer;
        $self->set($interface, $public_key, 'public-key', $public_key);
        $self->set($interface, $public_key, 'allowed-ips', $ip_address);
        if (defined $alias) {
            $self->set($interface, $public_key, 'alias', $alias);
        }
        if (defined $preshared_key) {
            $self->set($interface, $public_key, 'preshared-key', $preshared_key);
        }
        $self->enable($interface, $public_key);
        # set type to to Peer
        $self->{parsed_config}{$interface}{$public_key}{INTERNAL_KEY_PREFIX . 'type'} = 'Peer';
        # add section to global section list
        push @{$self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'section_order'}}, $public_key;
        return $self->{parsed_config}{$interface}{$interface}{'private-key'}, $self->{parsed_config}{$interface}{$interface}{'listen-port'};
    }
    else {
        die "Invalid interface `$interface`";
    }
}

=head3 remove_peer($interface, $identifier)

Removes a peer (identified by it's public key or alias) from an interface.

B

=over 1

=item

C<$interface> A valid interface name

=item

C<$identifier> A valid identifier (or an alias)

=back

B

Exception if interface or identifier is invalid

B

None

=cut
sub remove_peer($self, $interface, $identifier) {
    if ($self->is_valid_interface($interface)) {
        $identifier = $self->try_translate_alias($interface, $identifier);
        if ($self->is_valid_identifier($interface, $identifier)) {

            # delete section
            delete $self->{parsed_config}{$interface}{$identifier};

            # delete from section list
            $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'section_order'} = [ grep {$_ ne $identifier} @{$self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'section_order'}} ];

            # decrease peer count
            $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'n_peers'}--;

            # delete alias (if exists)
            while (my ($alias, $a_identifier) = each %{$self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'alias_map'}}) {
                if ($a_identifier eq $identifier) {
                    delete $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'alias_map'}{$alias};
                }
            }
            $self->_set_changed($interface);
        }
        else {
            die "Invalid identifier `$identifier` for `$interface`";
        }
    }
    else {
        die "Invalid interface `$interface`";
    }
}

=head3 remove_interface($interface [, $keep_file = FALSE])

Removes an interface. This command deletes the config file immediately. I.e no rollback possible!

B

=over 1

=item

C<$interface> A valid interface name

=back

B

Exception if interface or identifier is invalid

B

None

=cut
sub remove_interface($self, $interface) {
    if ($self->is_valid_interface($interface)) {
        # delete interface
        delete $self->{parsed_config}{$interface};
        if (-e "$self->{wireguard_home}$interface.conf") {
            unlink "$self->{wireguard_home}$interface.conf" or warn "Could not delete `$self->{wireguard_home}$interface.conf` do you have the needed permissions?";
        }
        $self->{n_conf_files}--;
    }
}

=head3 get_peer_count([$interface = undef])

Returns the number of peers.

B Does return the count represented in the current (parsed) configuration state.

B

=over 1

=item

C<[$interface = undef]> If defined and valid, only return counts for this specific interface

=back

B

Number of peers

=cut
sub get_peer_count($self, $interface = undef) {
    if (defined $interface && $self->is_valid_interface($interface)) {
        return $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'n_peers'};
    }
    else {
        my $count = 0;
        for ($self->get_interface_list()) {
            $count += $self->{parsed_config}{$_}{INTERNAL_KEY_PREFIX . 'n_peers'};
        }
        return $count;
    }
}

=head3 may_reload_from_disk($interface [, $new = FALSE])

Method to reload an interface configuration from disk. Also useful to add an new (externally) created
interface on-the-fly. If a config file with a I<.not_applied> suffix is present (and its mtime is newer
than the original one), it is taken as source for reloading the configuration data.

B

=over 1

=item *

C<$interface> A valid interface name

=item *

C<[$new = FALSE]> If set to True, the parser looks at C<$wireguard_home> for this new interface config.

=item *

C<[$force = FALSE]> When set to True, the configuration is reloaded regardless of its mtime.

=back

B

Exception: If the interface is invalid (or the config file is not found)

B

None, or undef if C<$new == True> and the interface is in fact not a wg config.

=cut
sub may_reload_from_disk($self, $interface, $new = FALSE, $force = FALSE, $_init = FALSE) {
    my $config_path = $self->{wireguard_home} . $interface . '.conf';
    # check if there is a newer, not applied version, if yes prefer this version
    my $not_applied_path = $self->{wireguard_home} . $interface . $self->{not_applied_suffix};
    if (-e $not_applied_path) {
        if (get_mtime($not_applied_path) > get_mtime($config_path)) {
            $config_path = $not_applied_path;
        }
    }
    if ($new == FALSE) {
        # do not use is_valid_interface() here otherwise there is a risk of infinite recursion (in a concurrent environment)
        if (exists $self->{parsed_config}{$interface}) {
            # we only reload if the on-disk version is newer than our local one
            # There is however one exception: The local config is based on a not applied version and this file somehow
            # unexpectedly deleted (e.g by a sysadmin..)
            my $on_disk_mtime = get_mtime($config_path);
            my $unexpected_delete = (exists $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'is_hot_config'}
                && $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'is_hot_config'} == 0
                && $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'mtime'} > $on_disk_mtime);

            if ($force || $unexpected_delete || $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'mtime'} < $on_disk_mtime) {
                my $contents = read_file($config_path);
                $self->{parsed_config}{$interface} = parse_wg_config2($contents, $interface, $self->{wg_meta_prefix}, $self->{wg_meta_disabled_prefix}, FALSE);
                $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'config_path'} = $config_path;
                $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'mtime'} = get_mtime($config_path);
                $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'is_hot_config'} = ($config_path =~ /$self->{not_applied_suffix}/) ? 0 : 1;
                $self->_call_reload_listeners($interface) if $_init == FALSE;
            }
        }
        else {
            die "Invalid interface $interface - if this is a new interface, set `\$new` to True";
        }
    }
    # We have a completely new interface
    else {
        if (-e $config_path) {
            my $contents = read_file($config_path);
            my $maybe_new_config = parse_wg_config2($contents, $interface, $self->{wg_meta_prefix}, $self->{wg_meta_disabled_prefix}, FALSE);
            if (defined $maybe_new_config) {
                $self->{n_conf_files}++;
                $self->{parsed_config}{$interface} = $maybe_new_config;
                $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'config_path'} = $config_path;
                $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'mtime'} = get_mtime($config_path);
                $self->{parsed_config}{$interface}{INTERNAL_KEY_PREFIX . 'is_hot_config'} = ($config_path =~ /$self->{not_applied_suffix}/) ? 0 : 1;
                $self->_call_reload_listeners($interface) if $_init == FALSE;;
            }
            else {
                return undef;
            }
        }
        else {
            die "The interface $interface was not found in $self->{wireguard_home}";
        }

    }

}

# internal method to create a configuration file (this method exists primarily for testing purposes)
sub create_config($self, $interface, $plain = FALSE) {
    return create_wg_config2(
        $self->{parsed_config}{$interface},
        $self->{wg_meta_prefix},
        $self->{wg_meta_disabled_prefix},
        $plain = $plain)
}

sub _has_changed($self, $interface) {
    return exists $self->{parsed_config}{$interface}{has_changed};
}

sub _set_changed($self, $interface) {
    $self->{parsed_config}{$interface}{has_changed} = 1;
}

sub _reset_changed($self, $interface) {
    delete $self->{parsed_config}{$interface}{has_changed} if (exists $self->{parsed_config}{$interface}{has_changed});
}

=head3 register_on_reload_listener($ref_handler, $handler_id [, $ref_listener_args = []])

Register your callback handlers for the C event here. Your handler is called
B the reload happened, is blocking and exceptions are caught in an C environment.

B

=over 1

=item

C<$ref_handler> Reference to a handler function. The following signature is expected:

    sub my_handler_function($interface, $ref_list_args){
        ...
    }

=item

C<$handler_id> An identifier for you handler function. Must be unique!

=item

C<[$ref_listener_args = []]> A reference to an argument list for your handler function

=back

B

None, exception if C<$handler_id> is already present.

=cut
sub register_on_reload_listener($self, $ref_handler, $handler_id, $ref_listener_args = []) {
    unless ($self->{reload_listeners}{$handler_id}) {
        my $listener_data = {
            'handler' => $ref_handler,
            'args'    => $ref_listener_args
        };
        $self->{reload_listeners}{$handler_id} = $listener_data;
    }
    else {
        die "Handler id $handler_id already present";
    }

}

=head3 remove_on_reload_listener($handler_id)

Removes a reload callback handler by it's C<$handler_id>.

B

=over 1

=item

C<$handler_id> A valid handler id

=back

B

1 on success, undef on failure.

=cut
sub remove_on_reload_listener($self, $handler_id) {
    if (exists $self->{reload_listeners}{$handler_id}) {
        delete $self->{reload_listeners}{$handler_id};
        return 1;
    }
    else {
        return undef;
    }
}

sub _call_reload_listeners($self, $interface) {
    for my $listener_id (keys %{$self->{reload_listeners}}) {
        eval {
            &{$self->{reload_listeners}{$listener_id}{handler}}($interface, $self->{reload_listeners}{$listener_id}{args});
        };
        if ($@) {
            warn "Call to reload_listener $listener_id failed: $@";
        }
    }
}


1;