#!/bin/sh
# read-logs.sh — pull /var/log/* from edge box for offline diagnostics
# Run from onyx.
#
# Usage: ./scripts/read-logs.sh user@<edge-ip>

set -eu
TARGET="${1:-}"
[ -n "$TARGET" ] || { echo "Usage: $0 user@<edge-ip>" >&2; exit 1; }

OUT="$(pwd)/out/edge-logs-$(date -u +%Y%m%dT%H%M%SZ)"
mkdir -p "$OUT"

scp -r "$TARGET:/var/log/{pflog,messages,authlog,daemon,relayd.log,acme-client.log,cert-renew.log}" "$OUT/" 2>/dev/null || true
ssh "$TARGET" 'doas pfctl -sr; doas pfctl -ss' > "$OUT/pf-state.txt" 2>&1 || true
ssh "$TARGET" 'doas rcctl ls on' > "$OUT/services.txt" 2>&1 || true

echo "[OK] $OUT"
ls -la "$OUT"