From 16eab1e1475072b2f203f071566b6a83249b1ca0 Mon Sep 17 00:00:00 2001
From: Patrick Spek <p.spek@tyil.nl>
Date: Sat, 11 Mar 2023 11:42:54 +0100
Subject: Initial commit

---
 playbook.bash | 170 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 170 insertions(+)
 create mode 100644 playbook.bash

(limited to 'playbook.bash')

diff --git a/playbook.bash b/playbook.bash
new file mode 100644
index 0000000..8747b32
--- /dev/null
+++ b/playbook.bash
@@ -0,0 +1,170 @@
+#!/usr/bin/env bash
+
+# shellcheck disable=SC2034
+
+BASHTARD_PLAYBOOK_VARS[$BASHTARD_PLAYBOOK.ipv4]="required"
+BASHTARD_PLAYBOOK_VARS[$BASHTARD_PLAYBOOK.name]="required"
+
+playbook_add()
+{
+	local data
+	local etc
+	local host
+	local ipv4
+	local name
+	local tinc
+	local tincd
+
+	data="$(playbook_path "data")"
+	etc="$(config "fs.etcdir")/tinc/tyilnet"
+	host="$(tr "." "_" <<< "${BASHTARD_PLATFORM[fqdn]}")"
+	ipv4="$(config "$BASHTARD_PLAYBOOK.ipv4")"
+	name="$(config "$BASHTARD_PLAYBOOK.name")"
+	tinc="$(config "app.tinc")"
+	tincd="$(config "app.tincd")"
+
+	case "${BASHTARD_PLATFORM[key]}" in
+		freebsd) iptool=ifconfig ;;
+		*)       iptool=ip
+	esac
+
+	info "$BASHTARD_PLAYBOOK/add" "Installing tinc"
+	pkg install "tinc"
+
+	info "$BASHTARD_PLAYBOOK/add" "Creating tinc configuration at $etc"
+	mkdir -pv -- \
+		"$etc" \
+		"$etc/hosts"
+
+	file_template tinc.conf \
+		"name=$host" \
+		> "$etc/tinc.conf"
+
+	file_template "tinc-up-$iptool" \
+		"ip4=$ipv4" \
+		> "$etc/tinc-up"
+
+	file_template "tinc-down-$iptool" \
+		"ip4=$ipv4" \
+		> "$etc/tinc-down"
+
+	file_template "host" \
+		"ip4=$ipv4" \
+		> "$etc/hosts/$host"
+
+	chmod +x \
+		"$etc/tinc-up" \
+		"$etc/tinc-down"
+
+	info "$BASHTARD_PLAYBOOK/add" "Generating private keys"
+
+	case "$($tincd --version | awk '{ print $3 }' | head -n1)" in
+		1.0*)
+			$tincd -n "$name" -K4096
+			;;
+		1.1*|*)
+			$tinc -n "$name" generate-rsa-keys 4096
+			$tinc -n "$name" generate-ed25519-keys
+			;;
+	esac
+
+	info "$BASHTARD_PLAYBOOK/add" "Adding new host to Bashtard configs"
+
+	mkdir -pv -- "$data/hosts"
+	cp -v -- \
+		"$etc/hosts/$host" \
+		"$data/hosts/$host"
+
+	playbook_sync
+
+	info "$BASHTARD_PLAYBOOK" "Enabling VPN service"
+
+	case "${BASHTARD_PLATFORM[key]}" in
+		freebsd)
+			if ! grep -Fq 'tincd_cfg="'"$name"'"' "/etc/rc.conf.d/tincd"
+			then
+				printf 'tincd_cfg="%s"\n' "$name" >> "/etc/rc.conf.d/tincd"
+			fi
+			;;
+		linux-gentoo)
+			if ! grep -Fq "NETWORK: $name" /etc/conf.d/tinc.networks
+			then
+				printf "NETWORK: %s\n" "$name" >> /etc/conf.d/tinc.networks
+			fi
+			;;
+	esac
+
+	case "${BASHTARD_PLATFORM[init]}" in
+		systemd)
+			systemctl enable --now "tinc@$name.service"
+			;;
+		*)
+			svc enable "tinc"
+			svc start "tinc"
+			;;
+	esac
+}
+
+playbook_sync()
+{
+	local data
+	local etc
+	local hash
+	local host
+	local name
+
+	data="$(playbook_path "data")"
+	etc="$(config "fs.etcdir")/tinc/$(config "$BASHTARD_PLAYBOOK.name")"
+	hash="$(dir_hash "$etc/hosts")"
+	host="$(tr "." "_" <<< "${BASHTARD_PLATFORM[fqdn]}")"
+	name="$(config "$BASHTARD_PLAYBOOK.name")"
+
+	info "$BASHTARD_PLAYBOOK" "Regenerating tinc hosts"
+	rm -fr -- "$etc/hosts"
+	mkdir -p -- "$etc/hosts"
+
+	for path in "$data/hosts"/*
+	do
+		file="$(basename "$path")"
+
+		notice "$BASHTARD_PLAYBOOK" "Updating host $file"
+		cp -v -- "$data/hosts/$file" "$etc/hosts/$file"
+	done
+
+	[[ "$BASHTARD_COMMAND" == "add" ]] && return
+	[[ "$hash" == "$(dir_hash "$etc/hosts")" ]] && return
+
+	info "$BASHTARD_PLAYBOOK" "Reloading service"
+
+	case "${BASHTARD_PLATFORM[init]}" in
+		systemd)
+			systemctl reload "tinc@$name.service"
+			;;
+		*)
+			svc reload "tinc"
+			;;
+	esac
+}
+
+playbook_del()
+{
+	local etc
+	local name
+
+	etc="$(config "fs.etcdir")"
+	name="$(config "$BASHTARD_PLAYBOOK.name")"
+
+	case "${BASHTARD_PLATFORM[init]}" in
+		systemd)
+			systemctl disable --now "tinc@$name.service"
+			;;
+		*)
+			svc stop "tinc"
+			svc disable "tinc"
+			;;
+	esac
+
+	pkg uninstall "tinc"
+
+	rm -frv -- "$etc/tinc/$name"
+}
-- 
cgit v1.1