porta-rs 0.1.1

Zero-trust CGNAT bypass via WireGuard tunnel
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52

use anyhow::Result;
use clap::Args;

use crate::config::{load_config, Role};
use crate::ufw::rules::UfwManager;

#[derive(Args)]
pub struct RemovePortArgs {
    /// ID of the port mapping to remove
    pub id: String,

    /// Skip UFW rule removal
    #[arg(long)]
    pub no_ufw: bool,
}

pub fn execute(args: &RemovePortArgs) -> Result<()> {
    let mut config = load_config()?;

    // Find the port mapping before removing
    let port_to_remove = config.ports().iter().find(|p| p.id == args.id).cloned();

    let initial_len = config.ports().len();
    config.ports_mut().retain(|p| p.id != args.id);

    if config.ports().len() == initial_len {
        return Err(anyhow::anyhow!("Port mapping '{}' not found", args.id));
    }

    config.save()?;

    // Remove UFW rule if on server
    if config.role() == Role::Server && !args.no_ufw {
        if let Some(port) = &port_to_remove {
            let ufw = UfwManager::new();
            if ufw.is_active() {
                match ufw.deny_port(port.remote_port, &port.protocol) {
                    Ok(()) => {
                        println!("\x1b[1;32m✓ UFW rule removed: {} {}\x1b[0m", port.remote_port, port.protocol);
                    }
                    Err(e) => {
                        println!("\x1b[1;33m⚠ Failed to remove UFW rule: {}\x1b[0m", e);
                    }
                }
            }
        }
    }

    println!("\n\x1b[1;32m✓ Port mapping '{}' removed\x1b[0m\n", args.id);

    Ok(())
}