#!/usr/bin/env bash
set -euo pipefail

export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:${PATH:-}"

if [ -z "${NVR_SUPPORT_AUTHORIZED_KEY:-}" ]; then
  printf 'unlock-nvr-support: informe NVR_SUPPORT_AUTHORIZED_KEY com uma chave publica SSH autorizada\n' >&2
  exit 2
fi

if ! command -v nvr-support-unlock >/dev/null 2>&1; then
  printf 'unlock-nvr-support: nvr-support-unlock ausente; atualize o appliance pelo pacote oficial\n' >&2
  exit 2
fi

if [ "$(id -u)" -eq 0 ]; then
  env \
    NVR_SUPPORT_AUTHORIZED_KEY="${NVR_SUPPORT_AUTHORIZED_KEY}" \
    NVR_SUPPORT_TTL_MINUTES="${NVR_SUPPORT_TTL_MINUTES:-240}" \
    NVR_SUPPORT_ALLOWED_CIDRS="${NVR_SUPPORT_ALLOWED_CIDRS:-192.168.0.0/16,10.0.0.0/8,172.16.0.0/12}" \
    nvr-support-unlock
else
  sudo -E env \
    NVR_SUPPORT_AUTHORIZED_KEY="${NVR_SUPPORT_AUTHORIZED_KEY}" \
    NVR_SUPPORT_TTL_MINUTES="${NVR_SUPPORT_TTL_MINUTES:-240}" \
    NVR_SUPPORT_ALLOWED_CIDRS="${NVR_SUPPORT_ALLOWED_CIDRS:-192.168.0.0/16,10.0.0.0/8,172.16.0.0/12}" \
    nvr-support-unlock
fi