#!/bin/bash
# Generic startup for target machines (dmz/app/secure).
# The default gateway is passed as $1 (e.g., 10.226.10.1 for dmz).
set -e

GATEWAY="${1:?Usage: target-routes.sh <gateway-ip>}"

# SSH setup
mkdir -p /root/.ssh
cp /ssh-keys/authorized_keys /root/.ssh/authorized_keys
chmod 700 /root/.ssh
chmod 600 /root/.ssh/authorized_keys
/usr/sbin/sshd

# Routing
ip route del default 2>/dev/null || true
ip route add default via "$GATEWAY"

# DNS
echo "nameserver 203.0.113.1" > /etc/resolv.conf

echo "Target machine ready: $(hostname)"
sleep infinity