#!/bin/sh
set -u

########################################################
get_public_bastion () {
  # AUTHDIR=/root/.ssh
  # AUTHFILE=${AUTHDIR}/authorized_keys

  # mkdir -p ${AUTHDIR}

  AUTHDIR=/var/lib/bastion/.ssh
  AUTHFILE=${AUTHDIR}/authorized_keys

  mkdir -p ${AUTHDIR}

  echo "Save keys from environment"
  echo "${PUBLIC_KEYS}" | base64 -d > ${AUTHFILE}
  chmod 644 ${AUTHFILE}

  cd /tmp
  rm -rf /tmp/zKeys*

  curl -LJO  https://github.com/spongle70/zKeys/archive/refs/heads/main.zip
  unzip zKeys*.zip

  cd zKeys-main
  echo "Save keys from github"
  if [ "${SERVER_TYPE}" == "master" ]
  then
      cat _b*.pub >> ${AUTHFILE}
      cat _d*.pub >> ${AUTHFILE}
  else
      cat _v*.pub >> ${AUTHFILE}
  fi

# testing
  #     cat _d*.pub >> ${AUTHFILE}
  #     cat _v*.pub >> ${AUTHFILE}
  # AUTHDIR=/root/.ssh
  # AUTHFILE=${AUTHDIR}/authorized_keys
  #     cat _d*.pub >> ${AUTHFILE}
  #     cat _v*.pub >> ${AUTHFILE}

  echo "The approved keys are:"
  cat ${AUTHFILE}
  rm -rf ./zKeys*
  echo "${SERVER_TYPE}: finished $0"
}


main() {
  echo "--------------Starting $0 -------------------------"
  get_public_bastion
}

main