blob: 95b9e02f361eb98a3a5cc7174e6da80c2e7e95ea (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
use netbird-api.nu
def mangle-name [prefix: string, name: string] {
$prefix + ($name
| str replace -ar '\s+' '_'
| str replace -ar '\W' '')
}
def find-changed-sets [] {
let sets = $in # nft_sets
| rename --column { name: nft_name }
let peers = netbird-api peers list
| insert nft_name { mangle-name 'nbp_' $in.name | str downcase }
| insert new_elem { [$in.ip] }
let groups = netbird-api groups list
| where peers != null
| each { update peers { select id | join $peers id } }
| insert nft_name { mangle-name 'nbg_' $in.name } # allow uppercase
| insert new_elem { $in.peers.ip }
let set_changes = [$peers, $groups] | flatten
| join $sets nft_name
| where { $in.new_elem != $in.elem }
return $set_changes
}
def generate-nft-commands [] {
# nft add talbe inet <name> # ignore if table already exists
# nft destroy table inet <name> # ignore if table already removed
let set_changes = $in
$set_changes | each {|s|
let path = [$s.family $s.table $s.nft_name] | str join ' '
[
$"flush set ($path)",
$"add element ($path) { ($s.new_elem | str join ', ') }"
]
} | flatten
}
def main [--test, --apply] {
let commands = if $test {
open --raw test-data/nft-sets.json
} else {
^nft --json list sets
} | from json | get nftables | skip 1 | get set
| find-changed-sets
| generate-nft-commands
| str join "\n"
if $apply {
$commands | ^nft -f -
} else {
$commands
}
}
|
