2021-10-09 09:11:05 +00:00
|
|
|
#!/bin/sh
|
2022-01-07 13:41:00 +00:00
|
|
|
|
2021-10-09 09:11:05 +00:00
|
|
|
CONFIG=/etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml
|
|
|
|
|
## Gen&ConfigApiKey
|
2022-01-07 13:41:00 +00:00
|
|
|
if grep -q "{API_KEY}" "$CONFIG"; then
|
2021-10-09 09:11:05 +00:00
|
|
|
SUFFIX=`tr -dc A-Za-z0-9 </dev/urandom | head -c 8`
|
2022-01-07 13:41:00 +00:00
|
|
|
API_KEY=`/usr/bin/cscli bouncers add crowdsec-firewall-bouncer-${SUFFIX} -o raw`
|
2021-10-09 09:11:05 +00:00
|
|
|
sed -i "s,^\(\s*api_key\s*:\s*\).*\$,\1$API_KEY," $CONFIG
|
2022-01-07 13:41:00 +00:00
|
|
|
else
|
|
|
|
|
echo API key already registered...
|
2021-10-09 09:11:05 +00:00
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
# unfortunately, UCI doesn't provide a nice way to add an anonymous section only if it doesn't already exist
|
|
|
|
|
if ! uci show firewall | grep -q firewall.cs; then
|
|
|
|
|
name="$(uci add firewall include)"
|
|
|
|
|
uci set "firewall.${name}.path=/etc/firewall.cs"
|
|
|
|
|
uci set "firewall.${name}.enabled=1"
|
|
|
|
|
uci set "firewall.${name}.reload=1"
|
|
|
|
|
echo -e "Adding the following UCI config:\n $(uci changes)"
|
|
|
|
|
uci commit
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
exit 0
|
