27 lines
1.6 KiB
Bash
27 lines
1.6 KiB
Bash
#!/bin/bash
|
|
# Network routing and terminal prerequisites
|
|
ensure_prerequisites() {
|
|
local target_ip="${VAULT_ADDR#*//}"
|
|
target_ip="${target_ip%%:*}"
|
|
if ! ip route get "${target_ip}" 2>/dev/null | grep -q "${VYOS_ROUTER_IP}"; then
|
|
log_info "Восстанавливаем маршрут к ${NET_PREFIX} через VyOS (${VYOS_ROUTER_IP})..."
|
|
sudo ip route replace "${NET_PREFIX}" via "${VYOS_ROUTER_IP}" 2>/dev/null || true
|
|
fi
|
|
# Регистрация Git Credential Helper (доменный и прямой IP Tier-0)
|
|
local target_helper="!${REPO_ROOT}/deploy.sh git-credential"
|
|
local current_helper
|
|
current_helper=$(git config --global --get credential."https://${GIT_HOST}".helper 2>/dev/null || true)
|
|
if [[ "${current_helper}" != "${target_helper}" ]]; then
|
|
git config --global credential."https://${GIT_HOST}".helper "${target_helper}"
|
|
fi
|
|
local direct_helper
|
|
direct_helper=$(git config --global --get credential."http://10.0.10.13:3000".helper 2>/dev/null || true)
|
|
if [[ "${direct_helper}" != "${target_helper}" ]]; then
|
|
git config --global credential."http://10.0.10.13:3000".helper "${target_helper}"
|
|
fi
|
|
# Нативная привязка IdentityFile для всех C2-хостов и LXC-контейнеров
|
|
local ssh_hosts="proxmox pve0 vyos vyos_router 10.0.* dns0 vault0 git0 storage0 registry0"
|
|
if [[ -f "${HOME}/.ssh/config" ]] && ! grep -q "IdentityFile ${RAM_KEY}" "${HOME}/.ssh/config"; then
|
|
printf "\nHost %s\n IdentityFile %s\n IdentitiesOnly yes\n" "${ssh_hosts}" "${RAM_KEY}" >> "${HOME}/.ssh/config"
|
|
fi
|
|
} |