#!/bin/sh
set -e

case "$1" in
    remove|deconfigure)
        # Stop offering the tunnels, but leave strongSwan itself enabled: it is
        # a shared service and may be in use by something other than this
        # package. The connection files are removed on purge.
        if [ -d /run/systemd/system ]; then
            swanctl --terminate --ike remote-site >/dev/null 2>&1 || true
            swanctl --terminate --ike road-warrior >/dev/null 2>&1 || true
        fi

        # This package enabled wg-quick@wg0, so it takes it down again. Use the
        # debhelper wrappers rather than systemctl, so the script behaves on a
        # machine without systemd.
        if command -v deb-systemd-invoke >/dev/null 2>&1; then
            deb-systemd-invoke stop wg-quick@wg0.service >/dev/null 2>&1 || true
        fi
        if command -v deb-systemd-helper >/dev/null 2>&1; then
            deb-systemd-helper disable wg-quick@wg0.service >/dev/null 2>&1 || true
        fi
        ;;
esac

#DEBHELPER#