#! /bin/bash

# shellcheck source=../scripts/helpers/index.sh
source /usr/local/bin/helpers/index.sh

function __usage { echo "Usage: ./setup.sh fail2ban [<ban|unban> <IP>]" ; }

unset JAILS
declare -a JAILS
IP_REGEXP='((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)'

for LIST in $(fail2ban-client status | grep "Jail list" | cut -f2- | sed 's/,/ /g')
do
  JAILS+=("${LIST}")
done

if [[ -z ${1} ]]
then
  IPS_BANNED=0

  for JAIL in "${JAILS[@]}"
  do
    BANNED_IPS=$(fail2ban-client status "${JAIL}" \
      | grep 'Banned IP list' \
      | grep -oE "${IP_REGEXP}")

    if [[ -n ${BANNED_IPS} ]]
    then
      echo "Banned in ${JAIL}: ${BANNED_IPS//$'\n'/, }"
      IPS_BANNED=1
    fi
  done

  [[ ${IPS_BANNED} -eq 0 ]] && _log 'info' "No IPs have been banned"
else

  case "${1}" in

    ( 'help' ) __usage ; exit ;;

    ( 'ban' )
      shift
      if [[ -n ${1} ]]
      then
        RESULT=$(fail2ban-client set custom banip "${@}")
        if [[ ${RESULT} -gt 0 ]]
        then
          echo "Banned custom IP: ${RESULT}"
        else
          _log 'error' "Banning '${*}' failed. Already banned?"
        fi

      else
        _log 'warn' "You need to specify an IP address: Run './setup.sh fail2ban ban <IP>'"
        exit 0
      fi
      ;;

    ( 'unban' )
      shift
      if [[ -n ${1} ]]
      then

        for JAIL in "${JAILS[@]}"
        do
          RESULT=$(fail2ban-client set "${JAIL}" unbanip "${@}" 2>&1)

          [[ ${RESULT} != *"is not banned"* ]] && [[ ${RESULT} != *"NOK"* ]] && echo "Unbanned IP from ${JAIL}: ${RESULT}"
        done

      else
        _log 'warn' "You need to specify an IP address: Run './setup.sh fail2ban' to get a list of banned IP addresses"
        exit 0
      fi
      ;;

    ( * )
      __usage
      _exit_with_error "Unknown command '${1}'"
      ;;

  esac

fi

exit 0