#!/bin/bash -eu

source "/usr/share/crypta-cm-tools/utils/cmd_utils.sh"
source "/usr/share/crypta-cm-tools/utils/dc_utils.sh"
source "/usr/share/crypta-cm-tools/utils/exec_utils.sh"

(( $# < 1 )) && echo "Usage: cm $(cmd_from_path "$0") <dc_abbrev>" && exit 1

dc="$1"
nanny_group=$(get_nanny_group "$dc")

echo "Removing ip6tables rules that block CM API off everything, except localhost, in dc $dc (${nanny_group})"
p_exec_remote "$nanny_group" sudo ip6tables -D INPUT -s localhost -p tcp --dport 80 -j ACCEPT ";" sudo ip6tables -D INPUT -p tcp --dport 80 -j DROP
