(define-library (config ssh)
  (export ssh-hosts
          ssh-authorized-keys)
  (import (guile)
	(guix utils)
	(scheme base)
	  (scheme load)
	  (guix gexp) ;plain-file
	  (srfi 1)
	  (gnu home services ssh))
  (begin
    ;; Generate all VCE numbers from 1 to num-vces
    (define (generate-openssh-hosts num-vces num-vms-per-vce)
      (let ((vce-numbers (iota num-vces 1))
            (vm-numbers (iota num-vms-per-vce 1)))
	;; For each VCE, generate configurations for all VMs
	(append-map
	 (lambda (vce-num)
           ;; For each VM number, create a configuration
           (map
            (lambda (vm-num)
              (openssh-host (name (string-append "rt-vce" (number->string vce-num) 
						 "-kali" (number->string vm-num)))
                            (user "redteam")
                            (host-name (string-append "172.18.6." (number->string (+ 60 vm-num))))
                            (identity-file "/home/robby/.ssh/redteam_key")
                            (proxy (list
                                    (proxy-jump (host-name (string-append "vce" (number->string vce-num))))))
                            (extra-content
                             (string-append "  DynamicForward 8888\n"
                                            "  StrictHostKeyChecking no\n"
                                            "  UserKnownHostsFile=/dev/null"))))
            vm-numbers))
	 vce-numbers)))

    (define redteam-kali-vms (generate-openssh-hosts 2 10))

    (define ssh-hosts
      (append (list (openssh-host (name "not-a-pi")
                                  (host-name "10.69.0.1"))
                    (openssh-host (name "zoinks")
                                  (host-name "zoinks.one"))
                    (openssh-host (name "lowell-makes")
                                  (host-name "96.81.79.90")
                                  (port 1122))
                    (openssh-host (name "lowell-makes-cameo2")
                                  (host-name "cameo2")
                                  (port 22)
                                  (proxy (list
                                          (proxy-jump (host-name "lowell-makes")))))
                    (openssh-host (name "lowell-makes-cameo")
                                  (host-name "cameo")
                                  (port 22)
                                  (proxy (list
                                          (proxy-jump (host-name "lowell-makes")))))
                    (openssh-host (name "lowell-makes-mogan")
                                  (host-name "mogan")
                                  (port 22)
                                  (proxy (list
                                          (proxy-jump (host-name "lowell-makes")))))
                    (openssh-host (name "bustelo")
                                  (host-name "10.5.10.187")
                                  (port 22)
                                  (proxy (list
                                          (proxy-jump (host-name "lowell-makes")))))
                    (openssh-host (name "moja")
                                  (host-name "45.77.97.44"))
                    (openssh-host (name "babel")
                                  (host-name "10.80.80.162"))
                    (openssh-host (name "alpha.apex")
                                  (host-name "149.28.47.99"))
                    (openssh-host (name "cnyhackathon-jump")
                                  (host-name "vce.cnyhackathon.org")
                                  (user "rz")
                                  (port 2210)
                                  (extra-content
                                   (string-append " DynamicForward 8888\n")))
                    (openssh-host (name "kali")
                                  (user "redteam")
                                  (host-name (string-append "172.18.6." (number->string (+ 60 7))))
                                  (identity-file "/home/robby/.ssh/redteam_key")
                                  (proxy (list
                                          (proxy-jump (host-name "cnyhackathon-jump"))))
                                  (extra-content
                                   (string-append "  DynamicForward 8888\n"
                                                  "  StrictHostKeyChecking no\n"
                                                  "  UserKnownHostsFile=/dev/null")))
                    (openssh-host (name "vce1")
                                  (host-name "vce1.ncaecybergames.org")
                                  (user "rz")
                                  (port 2210)
                                  (extra-content
                                   (string-append "  DynamicForward 8888\n")))
                    (openssh-host (name "vce2")
                                  (host-name "vce2.ncaecybergames.org")
                                  (user "rz")
                                  (port 2210)
                                  (extra-content
                                   (string-append "  DynamicForward 8888\n"))))
              redteam-kali-vms))

    ;; Authorized keys are pulled from secrets.scm
    (define ssh-authorized-keys
      (let ((secrets (load (string-append (dirname (current-filename)) "/../secrets.scm"))))
	(cdr (assq 'ssh-authorized-keys secrets))))))