#!/bin/bash

# Deploy UFW fix to all swarm nodes
# Usage: ./deploy-ufw-fix.sh

NODES=("192.168.1.27" "192.168.1.72" "192.168.1.113" "192.168.1.132")
SCRIPT_PATH="/home/tony/AI/secops/harden-ufw.sh"

echo "Deploying UFW fix to all swarm nodes..."

for node in "${NODES[@]}"; do
    echo "Processing node: $node"
    
    # Copy script to node
    scp "$SCRIPT_PATH" tony@$node:/tmp/harden-ufw.sh
    
    # Execute script on node
    ssh tony@$node "chmod +x /tmp/harden-ufw.sh && sudo /tmp/harden-ufw.sh"
    
    # Restart Docker service
    ssh tony@$node "sudo systemctl restart docker"
    
    # Clean up
    ssh tony@$node "rm /tmp/harden-ufw.sh"
    
    echo "Node $node completed"
    echo "---"
done

echo "UFW deployment complete on all nodes"