#!/bin/sh
# OpenVPN Discovery - COLETOR (Arthur's Gold Standard v6-CACHE)
# Este script roda via CRON e grava o resultado em cache
# Compatível com: pfSense 2.x / FreeBSD
#
# Instalação:
#   1. Copie para /opt/zabbix/openvpn-collector.sh
#   2. chmod +x /opt/zabbix/openvpn-collector.sh
#   3. Adicione ao cron: */1 * * * * /opt/zabbix/openvpn-collector.sh

SOCKET_DIR="/var/etc/openvpn"
CACHE_FILE="/tmp/openvpn_discovery.json"
CACHE_FILE_TMP="/tmp/openvpn_discovery.json.tmp"

# Inicia JSON
printf '{"data":[' > "$CACHE_FILE_TMP"

first=1

# Loop através de cada socket
for sockdir in "$SOCKET_DIR"/server*/; do
    [ -d "$sockdir" ] || continue
    
    sockfile="${sockdir}sock"
    [ -S "$sockfile" ] || continue
    
    server_name=$(basename "$sockdir")
    
    # Consulta o socket e processa linha por linha
    (echo "status 2"; sleep 0.3; echo "quit") | /usr/bin/nc -U "$sockfile" 2>/dev/null | \
    grep "^CLIENT_LIST," | grep -v "Common Name" | \
    while IFS=',' read -r type cn realaddr virtaddr rest; do
        [ -z "$cn" ] && continue
        
        real_ip=$(echo "$realaddr" | cut -d: -f1)
        virt_ip=$(echo "$virtaddr" | cut -d: -f1)
        
        if [ $first -eq 0 ]; then
            printf ','
        fi
        
        printf '{"{#VPN.USER}":"%s","{#VPN.SERVER}":"%s","{#VPN.REAL_IP}":"%s","{#VPN.VIRTUAL_IP}":"%s"}' "$cn" "$server_name" "$real_ip" "$virt_ip"
        first=0
    done >> "$CACHE_FILE_TMP"
    
    first=0
done

printf ']}\n' >> "$CACHE_FILE_TMP"

# Move atomicamente para evitar leitura parcial
mv "$CACHE_FILE_TMP" "$CACHE_FILE"
chmod 644 "$CACHE_FILE"