Initial release

.dockerignore

+**
+!terminator

.env.sample

+export CFG_ZULIP_API=https://zulip.pirati.cz/api/v1/
+export CFG_ZULIP_AUTH=terminator-bot@zulip.pirati.cz:XXXXXXXXXXXXXXXXXXXXXXX
+export CFG_ZULIP_DB=postgresql://zulip:XXXXXXXXX@pg.intranet.pirati.cz/zulip
+export CFG_KEYCLOAK_DB=postgresql://keycloak:XXXXXXXXXX@pg.intranet.pirati.cz/keycloak
+export CFG_GROUPS_MEMBERS='b43ea242-1c79-4846-a526-6512beac04af f19b4053-df5d-4c0d-bf65-8b3f30e830c6 ad0a3343-f2aa-4650-8689-44ae98d3c916'
+export CFG_GROUPS_GUESTS='0bef9f31-d19d-4a24-8ab1-b711371800d8'
+export CFG_GROUPS_BANNED='765c76cd-6801-44c6-90c5-8233ceb1f9a9'

.gitignore

+.env

.gitlab-ci.yml

+image: docker:latest
+
+variables:
+  DOCKER_TLS_CERTDIR: "/certs"
+
+services:
+  - docker:dind
+
+before_script:
+  - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
+  - VERSION=`cat VERSION`
+
+build:
+  stage: build
+  script:
+    - docker pull $CI_REGISTRY_IMAGE:latest || true
+    - docker build --cache-from $CI_REGISTRY_IMAGE:latest --tag $CI_REGISTRY_IMAGE:$VERSION --tag $CI_REGISTRY_IMAGE:latest .
+    - docker push $CI_REGISTRY_IMAGE:$VERSION
+    - docker push $CI_REGISTRY_IMAGE:latest

Dockerfile

+FROM alpine:latest
+
+RUN apk update && apk add perl-mojolicious perl-mojo-pg perl-io-socket-ssl
+
+ADD . /opt
+
+WORKDIR /opt
+CMD /opt/terminator
+

LICENSE

+
+			 The "Artistic License"
+
+				Preamble
+
+The intent of this document is to state the conditions under which a
+Package may be copied, such that the Copyright Holder maintains some
+semblance of artistic control over the development of the package,
+while giving the users of the package the right to use and distribute
+the Package in a more-or-less customary fashion, plus the right to make
+reasonable modifications.
+
+Definitions:
+
+	"Package" refers to the collection of files distributed by the
+	Copyright Holder, and derivatives of that collection of files
+	created through textual modification.
+
+	"Standard Version" refers to such a Package if it has not been
+	modified, or has been modified in accordance with the wishes
+	of the Copyright Holder as specified below.
+
+	"Copyright Holder" is whoever is named in the copyright or
+	copyrights for the package.
+
+	"You" is you, if you're thinking about copying or distributing
+	this Package.
+
+	"Reasonable copying fee" is whatever you can justify on the
+	basis of media cost, duplication charges, time of people involved,
+	and so on.  (You will not be required to justify it to the
+	Copyright Holder, but only to the computing community at large
+	as a market that must bear the fee.)
+
+	"Freely Available" means that no fee is charged for the item
+	itself, though there may be fees involved in handling the item.
+	It also means that recipients of the item may redistribute it
+	under the same conditions they received it.
+
+1. You may make and give away verbatim copies of the source form of the
+Standard Version of this Package without restriction, provided that you
+duplicate all of the original copyright notices and associated disclaimers.
+
+2. You may apply bug fixes, portability fixes and other modifications
+derived from the Public Domain or from the Copyright Holder.  A Package
+modified in such a way shall still be considered the Standard Version.
+
+3. You may otherwise modify your copy of this Package in any way, provided
+that you insert a prominent notice in each changed file stating how and
+when you changed that file, and provided that you do at least ONE of the
+following:
+
+    a) place your modifications in the Public Domain or otherwise make them
+    Freely Available, such as by posting said modifications to Usenet or
+    an equivalent medium, or placing the modifications on a major archive
+    site such as uunet.uu.net, or by allowing the Copyright Holder to include
+    your modifications in the Standard Version of the Package.
+
+    b) use the modified Package only within your corporation or organization.
+
+    c) rename any non-standard executables so the names do not conflict
+    with standard executables, which must also be provided, and provide
+    a separate manual page for each non-standard executable that clearly
+    documents how it differs from the Standard Version.
+
+    d) make other distribution arrangements with the Copyright Holder.
+
+4. You may distribute the programs of this Package in object code or
+executable form, provided that you do at least ONE of the following:
+
+    a) distribute a Standard Version of the executables and library files,
+    together with instructions (in the manual page or equivalent) on where
+    to get the Standard Version.
+
+    b) accompany the distribution with the machine-readable source of
+    the Package with your modifications.
+
+    c) give non-standard executables non-standard names, and clearly
+    document the differences in manual pages (or equivalent), together
+    with instructions on where to get the Standard Version.
+
+    d) make other distribution arrangements with the Copyright Holder.
+
+5. You may charge a reasonable copying fee for any distribution of this
+Package.  You may charge any fee you choose for support of this
+Package.  You may not charge a fee for this Package itself.  However,
+you may distribute this Package in aggregate with other (possibly
+commercial) programs as part of a larger (possibly commercial) software
+distribution provided that you do not advertise this Package as a
+product of your own.  You may embed this Package's interpreter within
+an executable of yours (by linking); this shall be construed as a mere
+form of aggregation, provided that the complete Standard Version of the
+interpreter is so embedded.
+
+6. The scripts and library files supplied as input to or produced as
+output from the programs of this Package do not automatically fall
+under the copyright of this Package, but belong to whoever generated
+them, and may be sold commercially, and may be aggregated with this
+Package.  If such scripts or library files are aggregated with this
+Package via the so-called "undump" or "unexec" methods of producing a
+binary executable image, then distribution of such an image shall
+neither be construed as a distribution of this Package nor shall it
+fall under the restrictions of Paragraphs 3 and 4, provided that you do
+not represent such an executable image as a Standard Version of this
+Package.
+
+7. C subroutines (or comparably compiled subroutines in other
+languages) supplied by you and linked into this Package in order to
+emulate subroutines and variables of the language defined by this
+Package shall not be considered part of this Package, but are the
+equivalent of input as in Paragraph 6, provided these subroutines do
+not change the language in any way that would cause it to fail the
+regression tests for the language.
+
+8. Aggregation of this Package with a commercial distribution is always
+permitted provided that the use of this Package is embedded; that is,
+when no overt attempt is made to make this Package's interfaces visible
+to the end user of the commercial distribution.  Such use shall not be
+construed as a distribution of this Package.
+
+9. The name of the Copyright Holder may not be used to endorse or promote
+products derived from this software without specific prior written permission.
+
+10. THIS PACKAGE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR
+IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
+WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
+
+				The End

VERSION

+0.1.0

info.txt

+curl -sSX GET -G https://zulip.pirati.cz/api/v1/users -u terminator-bot@zulip.pirati.cz:GfbKcLd5JydL0nQYZDG0XzSEy7YhudPJ
+
+GET https://zulip.pirati.cz/api/v1/users
+DELETE https://zulip.pirati.cz/api/v1/users/{user_id}
+POST https://zulip.pirati.cz/api/v1/users/{user_id}/reactivate

terminator

+#!/usr/bin/perl
+use strict;
+use warnings;
+
+use utf8;
+use open ":encoding(utf8)";
+binmode(STDOUT, ":utf8");
+
+use feature 'signatures';
+no warnings qw{ experimental::signatures };
+
+use Mojo::Pg;
+use Mojo::UserAgent;
+
+# Konfigurace z ENV
+
+my $cfg = {};
+
+KEY:
+foreach my $key ( keys %ENV ) {
+    if ( $key =~ /^CFG_(.+)/i ) {
+        $cfg->{lc($1)} = $ENV{$key};
+    }
+}
+
+# User agent a spojeni s databazemi
+
+my $ua = Mojo::UserAgent->new;
+my $zulip = Mojo::Pg->new($cfg->{zulip_db});
+my $keycloak = Mojo::Pg->new($cfg->{keycloak_db});
+
+# mapa clenstvi ve skupinach
+
+my $membership = {};
+
+foreach my $type (qw(members guests banned)) {
+    my @ids = split /\s+/, $cfg->{ "groups_$type" };
+    my $placeholders = join ', ', map {'?'} @ids;
+    my $ugms = $keycloak->db->query("SELECT * from user_group_membership where group_id in ($placeholders)", @ids)->hashes;
+    for my $ugm ($ugms->each()) {
+        $membership->{$type}{ $ugm->{user_id} }++;
+    }
+}
+
+# uzivatele zulip
+
+my $zulip_users = $zulip->db->query('SELECT id, is_active, full_name, role, delivery_email FROM zulip.zerver_userprofile WHERE realm_id=2 and not is_bot and not is_superuser order by full_name')->hashes;
+
+# processing
+
+USER:
+for my $user ($zulip_users->each()) {
+    my $uuid = $user->{delivery_email};
+    next if $uuid !~ s/\@zulip.pirati.cz$//;
+
+    if ( is_banned($uuid) ) {
+        deactivate($user, 'zabanovan');
+    }
+    elsif ( is_member($uuid) ) {
+        activate($user);
+        set_role($user, 'member');
+    }
+    elsif ( is_guest($uuid) ) {
+        activate($user);
+        set_role($user, 'guest');
+    }
+    else {
+        deactivate($user, 'deaktivovan');
+    }
+}
+
+sub is_banned ($uuid) { return $membership->{banned}{$uuid} }
+
+sub is_member ($uuid) { return $membership->{members}{$uuid} }
+
+sub is_guest  ($uuid) { return $membership->{guests}{$uuid} }
+
+sub activate ( $user ) {
+    return if $user->{is_active};
+    my $url = Mojo::URL->new($cfg->{zulip_api} . "/users/$user->{id}/reactivate")->userinfo($cfg->{zulip_auth});
+    my $rc = $ua->post($url)->result->json;
+    if ( $rc->{result} eq 'success') {
+        notify("Uživatel $user->{full_name} byl aktivovan");
+    }
+    else {
+        print $rc->{msg} . "\n";
+    }
+}
+
+sub deactivate ( $user, $action ) {
+    return if ! $user->{is_active};
+    my $url = Mojo::URL->new($cfg->{zulip_api} . "/users/$user->{id}")->userinfo($cfg->{zulip_auth});
+    my $rc = $ua->delete($url)->result->json;
+    if ( $rc->{result} eq 'success') {
+        notify("Uživatel $user->{full_name} byl $action");
+    }
+    else {
+        print $rc->{msg} . "\n";
+    }
+}
+
+sub set_role ( $user, $role ) {
+    my $change;
+
+    if ( $role eq 'member' ) {
+        $change = 400 if $user->{role} == 600;
+    }
+    elsif ( $role eq 'guest' ) {
+        $change = 600 if $user->{role} < 600;
+    }
+    if ( $change ) {
+        my $url = Mojo::URL->new($cfg->{zulip_api} . "/users/$user->{id}")->userinfo($cfg->{zulip_auth});
+        my $rc = $ua->patch($url, form => { role => $change})->result->json;
+        if ( $rc->{result} eq 'success') {
+            notify("Uživatel $user->{full_name} byla změněna role na '$role'");
+        }
+        else {
+            print $rc->{msg} . "\n";
+        }
+    }
+}
+
+sub notify ( $message ) {
+    my $url = Mojo::URL->new($cfg->{zulip_api} . '/messages')->userinfo($cfg->{zulip_auth});
+
+    my $rc  = $ua->post($url, form => {
+        to      => 6,
+        topic   => "Změna přístupů",
+        type    => 'channel',
+        content => $message
+    })->result->json;
+}