nixos-config/machines/chungus/zerotier-controller.nix
2024-06-26 01:09:51 +02:00

32 lines
1.2 KiB
Nix

{ pkgs, lib, config, clanLib, ... }:
let
zerotierSetup = ''
export NWID=${config.clan.core.facts.services.zerotier.public."zerotier-network-id".value}
export TOKEN=$(cat /var/lib/zerotier-one/authtoken.secret)
'';
zerotierCommand = name: command: pkgs.writers.writeBashBin name ''
set -e
set -o pipefail
export PATH=${pkgs.curl}/bin:${pkgs.gojq}/bin:${pkgs.zerotierone}/bin:$PATH
${zerotierSetup}
${command}
'';
in
{
environment.systemPackages = [
(zerotierCommand "zerotier-script-members" ''
curl "http://localhost:9993/controller/network/''${NWID}/member" -H "X-ZT1-AUTH: ''${TOKEN}" | gojq
'')
(zerotierCommand "zerotier-script-delete-member" ''
if [ "$#" -ne 1 ]; then
echo "Memid is missing."
exit 1
fi
export MEMID=$1
echo "deauthorized $MEMID"
curl -X POST "http://localhost:9993/controller/network/''${NWID}/member/''${MEMID}" -H "X-ZT1-AUTH: ''${TOKEN}" -d '{"authorized": false}' | gojq
echo "delete $MEMID"
curl -X DELETE "http://localhost:9993/controller/network/''${NWID}/member/''${MEMID}" -H "X-ZT1-AUTH: ''${TOKEN}" | gojq
'')
];
}