f61bc59446
- commands/block/: block.sh, show.sh, helpers.sh - commands/unblock/: unblock.sh, show.sh, helpers.sh - flag::define array type: --ip[], --subnet[], --port[], --service[] - help.sh: use pre-cached _FLAG_C_* arrays instead of flag::_parse_constraints - remove flag::_parse_constraints/flag::_constraint_get calls from help.sh - adopt local var; var=value pattern for safe assignment
52 lines
No EOL
2.3 KiB
Bash
52 lines
No EOL
2.3 KiB
Bash
#!/usr/bin/env bash
|
|
# commands/unblock/show.sh
|
|
|
|
function cmd::unblock::show::on_load() {
|
|
help::section "Target"
|
|
flag::define --name value "Peer name to unblock" [label="name", section="Target"]
|
|
flag::define --identity value "Unblock all peers in identity" [label="identity", section="Target"]
|
|
flag::define --type value "Filter by device type" [label="type", section="Target"]
|
|
|
|
help::section "Rules"
|
|
flag::define --ip[] "Unblock specific IP" [label="ip", section="Rules"]
|
|
flag::define --subnet[] "Unblock specific subnet" [label="subnet", section="Rules"]
|
|
flag::define --port[] "Unblock specific port (ip:port:proto)" [label="port", section="Rules"]
|
|
flag::define --service[] "Unblock by service name" [label="service", section="Rules"]
|
|
flag::define --all bool "Unblock all rules" [section="Rules"]
|
|
|
|
help::section "Options"
|
|
flag::define --reason value "Reason for unblock (recorded in history)" [label="reason", section="Options"]
|
|
flag::define --force bool "Skip confirmation" [section="Options"]
|
|
flag::define --quiet bool "Suppress output" [section="Options"]
|
|
|
|
flag::exclusive --name --identity
|
|
}
|
|
|
|
function cmd::unblock::show::run() {
|
|
flag::parse "$@" || return 1
|
|
|
|
local name; name=$(flag::value --name)
|
|
local identity; identity=$(flag::value --identity)
|
|
local type; type=$(flag::value --type)
|
|
local reason; reason=$(flag::value --reason)
|
|
local all=false quiet=false force=false
|
|
flag::bool --all && all=true
|
|
flag::bool --quiet && quiet=true
|
|
flag::bool --force && force=true
|
|
|
|
local -a ips=() subnets=() ports=() services=()
|
|
while IFS= read -r v; do [[ -n "$v" ]] && ips+=("$v"); done < <(flag::array --ip)
|
|
while IFS= read -r v; do [[ -n "$v" ]] && subnets+=("$v"); done < <(flag::array --subnet)
|
|
while IFS= read -r v; do [[ -n "$v" ]] && ports+=("$v"); done < <(flag::array --port)
|
|
while IFS= read -r v; do [[ -n "$v" ]] && services+=("$v"); done < <(flag::array --service)
|
|
|
|
if [[ -z "$name" && -z "$identity" ]]; then
|
|
log::error "Missing required flag: --name or --identity"
|
|
return 1
|
|
fi
|
|
|
|
cmd::unblock::_impl \
|
|
"$name" "$identity" "$type" "$reason" \
|
|
"$all" "$quiet" "$force" \
|
|
ips subnets ports services
|
|
} |