nixos-config/machines/chungus/zerotier-controller.nix
2024-10-09 21:27:44 +09:00

43 lines
1.2 KiB
Nix

{
pkgs,
lib,
config,
clanLib,
...
}:
let
zerotierSetup = ''
export NWID=${config.clan.core.facts.services.zerotier.public."zerotier-network-id".value}
export TOKEN=$(cat /var/lib/zerotier-one/authtoken.secret)
'';
zerotierCommand =
name: command:
pkgs.writers.writeBashBin name ''
set -e
set -o pipefail
export PATH=${pkgs.curl}/bin:${pkgs.gojq}/bin:${pkgs.zerotierone}/bin:$PATH
${zerotierSetup}
${command}
'';
in
{
healthchecks.closed.retiolum.ports.vault = [ 9993 ];
environment.systemPackages = [
(zerotierCommand "zerotier-script-members" ''
curl "http://localhost:9993/controller/network/''${NWID}/member" -H "X-ZT1-AUTH: ''${TOKEN}" | gojq
'')
(zerotierCommand "zerotier-script-delete-member" ''
if [ "$#" -ne 1 ]; then
echo "Memid is missing."
exit 1
fi
export MEMID=$1
echo "deauthorized $MEMID"
curl -X POST "http://localhost:9993/controller/network/''${NWID}/member/''${MEMID}" -H "X-ZT1-AUTH: ''${TOKEN}" -d '{"authorized": false}' | gojq
echo "delete $MEMID"
curl -X DELETE "http://localhost:9993/controller/network/''${NWID}/member/''${MEMID}" -H "X-ZT1-AUTH: ''${TOKEN}" | gojq
'')
];
}