#!/bin/bash

# Hardcoded parameters
RESOURCE_GROUP="outright-1_group"
NSG_NAME="outrightsystems-new-nic-77a4cd5275744a3588d5569b833635e0-nsg"

echo "Fetching SSH rules from NSG: $NSG_NAME..."

# Get a list of all NSG rules that allow port 22
RULES=$(az network nsg rule list --resource-group "$RESOURCE_GROUP" --nsg-name "$NSG_NAME" --query "[?destinationPortRange=='22'].name" -o tsv)

# Check if there are any rules to delete
if [ -z "$RULES" ]; then
    echo "No SSH rules found in NSG: $NSG_NAME"
    exit 0
fi

# Iterate over each rule and delete it
for RULE_NAME in $RULES; do
    echo "Removing SSH rule: $RULE_NAME..."
    
    az network nsg rule delete \
        --resource-group "$RESOURCE_GROUP" \
        --nsg-name "$NSG_NAME" \
        --name "$RULE_NAME"

    # Check if the command was successful
    if [ $? -eq 0 ]; then
        echo "Successfully removed: $RULE_NAME"
    else
        echo "Failed to remove: $RULE_NAME"
    fi
done

echo "All SSH rules have been removed."
