#!/bin/bash
# /etc/NetworkManager/dispatcher.d/99-my-script
# NM Dispatcher 脚本模板

INTERFACE=$1     # 网络接口名（如 eth0, wlan0）
EVENT=$2         # 事件类型（如 up, down）

# 接口状态信息（仅 up/down/dhcp*-change 时可用）
CONNECTION_ID=$(echo "$CONNECTION_ID")    # 连接名称
CONNECTION_UUID=$(echo "$CONNECTION_UUID") # 连接 UUID
IP4_ADDRESS=$(echo "$IP4_ADDRESS_0")       # IPv4 地址
IP4_GATEWAY=$(echo "$IP4_GATEWAY")         # IPv4 网关

case "$EVENT" in
    up)
        echo "$(date): Interface $INTERFACE connected" >> /var/log/nm-dispatcher.log
        ;;
    down)
        echo "$(date): Interface $INTERFACE disconnected" >> /var/log/nm-dispatcher.log
        ;;
    dhcp4-change)
        echo "$(date): DHCP lease changed on $INTERFACE" >> /var/log/nm-dispatcher.log
        ;;
esac

exit 0

# 权限要求
sudo chmod 755 /etc/NetworkManager/dispatcher.d/99-my-script
sudo chown root:root /etc/NetworkManager/dispatcher.d/99-my-script

# 文件命名
# 必须是可执行文件
# 不能以 .bak, .rpmnew, .rpmsave, .swp 结尾
# 按字母顺序执行，建议用数字前缀控制顺序
# 00-49: NM 内部保留
# 50-99: 用户自定义

# 两个执行目录
/etc/NetworkManager/dispatcher.d/pre-up.d/    # 连接前执行
/etc/NetworkManager/dispatcher.d/no-wait.d/   # 不等待完成（异步）

#!/bin/bash
# /etc/NetworkManager/dispatcher.d/50-connection-logger

INTERFACE=$1
EVENT=$2
LOG_FILE="/var/log/nm-connections.log"

if [ -z "$INTERFACE" ] || [ -z "$EVENT" ]; then
    exit 0
fi

echo "$(date '+%Y-%m-%d %H:%M:%S') | $EVENT | $INTERFACE | ${CONNECTION_ID:-N/A} | ${IP4_ADDRESS_0:-N/A}" >> "$LOG_FILE"

exit 0

#!/bin/bash
# /etc/NetworkManager/dispatcher.d/60-auto-vpn

INTERFACE=$1
EVENT=$2

# 只在特定网络连接时触发
if [ "$EVENT" = "up" ] && [ "$CONNECTION_ID" = "Office-WiFi" ]; then
    logger -t nm-dispatcher "Office WiFi detected, starting VPN..."
    sleep 3  # 等待网络稳定
    nmcli connection up "Corp-VPN" &
fi

exit 0

#!/bin/bash
# /etc/NetworkManager/dispatcher.d/55-firewall-update

INTERFACE=$1
EVENT=$2

case "$EVENT" in
    up)
        # 只对有线网络应用防火墙规则
        if [ "$INTERFACE" = "eth0" ]; then
            /usr/local/bin/update-firewall.sh "$IP4_ADDRESS_0"
            logger -t nm-dispatcher "Firewall updated for $INTERFACE ($IP4_ADDRESS_0)"
        fi
        ;;
    down)
        if [ "$INTERFACE" = "eth0" ]; then
            /usr/local/bin/cleanup-firewall.sh
        fi
        ;;
esac

exit 0

#!/bin/bash
# /etc/NetworkManager/dispatcher.d/52-wifi-dns

INTERFACE=$1
EVENT=$2

if [ "$INTERFACE" != "wlan0" ]; then
    exit 0
fi

case "$EVENT" in
    up)
        if [ "$CONNECTION_ID" = "HomeWiFi" ]; then
            # 家庭网络使用 Pi-hole
            nmcli connection modify "$CONNECTION_ID" ipv4.dns "192.168.1.5"
            logger -t nm-dispatcher "Switched to Pi-hole DNS"
        fi
        ;;
esac

exit 0

#!/bin/bash
# /etc/NetworkManager/dispatcher.d/60-notify

INTERFACE=$1
EVENT=$2

if [ "$EVENT" = "up" ]; then
    # 如果有桌面环境，发送桌面通知
    if [ -n "$DISPLAY" ]; then
        sudo -u $(logname) DISPLAY=$DISPLAY \
            notify-send "网络已连接" "接口: $INTERFACE\n连接: ${CONNECTION_ID:-unknown}\nIP: ${IP4_ADDRESS_0:-unknown}" \
            --icon=network-transmit-receive
    fi

    # 发送消息到 Slack/钉钉（如果有 webhook）
    if [ -f /etc/nm-webhook.conf ]; then
        WEBHOOK_URL=$(cat /etc/nm-webhook.conf)
        curl -s -X POST "$WEBHOOK_URL" \
            -H 'Content-Type: application/json' \
            -d "{\"text\": \"Network up: $INTERFACE ($CONNECTION_ID) ${IP4_ADDRESS_0}\"}" &
    fi
fi

exit 0

#!/bin/bash
# /etc/NetworkManager/dispatcher.d/65-nfs-mount

INTERFACE=$1
EVENT=$2

if [ "$EVENT" = "up" ] && [ "$CONNECTION_ID" = "Office-LAN" ]; then
    logger -t nm-dispatcher "Office LAN connected, mounting NFS shares..."
    sleep 2
    mount -a -t nfs4
    mount -a -t cifs
elif [ "$EVENT" = "down" ] && [ "$CONNECTION_ID" = "Office-LAN" ]; then
    logger -t nm-dispatcher "Office LAN disconnected, unmounting NFS shares..."
    umount -a -t nfs4 -f -l
    umount -a -t cifs -f -l
fi

exit 0

#!/bin/bash
# /etc/NetworkManager/dispatcher.d/53-dnsmasq-update

INTERFACE=$1
EVENT=$2

if [ "$EVENT" = "dhcp4-change" ] && [ "$INTERFACE" = "eth0" ]; then
    # 更新 dnsmasq 的上游 DNS
    NEW_DNS=$(nmcli -t -f IP4.DNS device show "$INTERFACE" | head -1 | cut -d: -f2)
    if [ -n "$NEW_DNS" ]; then
        echo "server=$NEW_DNS" > /etc/dnsmasq.d/upstream.conf
        systemctl reload dnsmasq
        logger -t nm-dispatcher "Updated upstream DNS to $NEW_DNS"
    fi
fi

exit 0

# 查看所有环境变量（调试用）
#!/bin/bash
# /etc/NetworkManager/dispatcher.d/99-debug-env
env | sort > /tmp/nm-dispatcher-env-$(date +%s).txt
exit 0

# 1. 脚本必须由 root 拥有
sudo chown root:root /etc/NetworkManager/dispatcher.d/*

# 2. 脚本必须可执行
sudo chmod 755 /etc/NetworkManager/dispatcher.d/*

# 3. 验证输入参数
if [ -z "$INTERFACE" ] || [ -z "$EVENT" ]; then
    exit 0
fi

# 4. 使用完整路径
/usr/bin/curl ...
/usr/sbin/iptables ...

# 5. 处理错误
if ! nmcli connection up "VPN" 2>/dev/null; then
    logger -t nm-dispatcher "Failed to start VPN"
fi

# 6. 避免长时间运行的操作
# 使用后台执行或 no-wait.d 目录
long_running_task &

# 7. 脚本测试
# 手动模拟调用
INTERFACE=eth0 EVENT=up CONNECTION_ID="Wired" \
    /etc/NetworkManager/dispatcher.d/50-my-script eth0 up

# 查看 dispatcher 日志
journalctl -u NetworkManager-dispatcher

# 查看脚本执行错误
journalctl -u NetworkManager-dispatcher | grep -i "error\|fail"

# 手动测试脚本
INTERFACE=eth0 EVENT=up \
    /etc/NetworkManager/dispatcher.d/50-logger eth0 up

# 检查脚本权限
ls -la /etc/NetworkManager/dispatcher.d/

# 检查 dispatcher 服务状态
systemctl status NetworkManager-dispatcher

# 启用 dispatcher 服务
sudo systemctl enable NetworkManager-dispatcher
sudo systemctl start NetworkManager-dispatcher

# 常见问题：脚本不执行
# 1. 文件不是可执行文件
# 2. 文件不是 root 所有
# 3. 文件以 .bak/.swp 结尾
# 4. 脚本语法错误
# 5. dispatcher 服务未运行