Easy flexible captive portal. Leave your network open, and stargate can control access for you. Run it on your router, if you dare!
Feedback is wanted. Open issues!
- Control access to multiple networks as well as the internet
- Tokens can
- Multiple keys per token
go get github.com/soellman/stargate
- Move the binary wherever you like.
- Copy the example config (
example/stargate.yaml
) to/etc/stargate.yaml
, and edit as you like. Make it 0400.
Start it up (e.g. nohup sudo stargate
). You'll need to run as root - it requires iptables and has passwords in the config file.
- Make sure you enable ip forwarding:
sysctl -w net.ipv4.ip_forward=1
- It logs to stdout, redirect as you please.
- When you stop stargate, it will remove all access from the managed network
- Logging in only provides access until the token expires or stargate is stopped/restarted
Stargate is NOT professional-grade security. Use at your own risk.
- Stargate is susceptible to DNS tunneling
- Stargate doesn't support SSL and login traffic can be sniffed