if (-not ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")) {
    Write-Error "This script must be run as an administrator."
    exit 1
}

Get-Service ssh-agent | Set-Service -StartupType Automatic -PassThru | Start-Service

Get-ChildItem -Path $sourceFolder -Recurse -Filter "*.key" | ForEach-Object {
    Copy-Item -Path $_.FullName -Destination $destinationFile -Force
    ssh-add $destinationFile
}

Get-ChildItem -Path $destinationFolder -Filter "*.key" | ForEach-Object {
    Remove-Item -Path $_.FullName -Force
}

Add-Content -Path $sshConfigFile -Value $newHostConfig

.\ManageSSH.ps1 -sourceFolder "Path\To\Your\Keys"

<#
.SYNOPSIS
    Manages SSH keys by ensuring the ssh-agent is running, copying keys, adding them to the agent, 
    updating the SSH config file, and removing the copied key files after adding them to ssh-agent.

.DESCRIPTION
    This script performs the following tasks:
    - Ensures the ssh-agent service is running and set to start automatically.
    - Recursively copies private key files (.key) from a specified source folder to the .ssh directory.
    - Adds the private keys to the ssh-agent.
    - Updates the SSH config file with specified host configurations.
    - Removes all private key files from the .ssh directory after they are added to ssh-agent.

.PARAMETER sourceFolder
    The path to the folder containing the private key files to be processed.

.EXAMPLE
    .\ManageSSH.ps1 -sourceFolder "G:\Keys"

    This command recursively copies all .key files from "G:\Keys" to the .ssh directory, 
    adds them to the ssh-agent, updates the SSH config, and removes the copied keys.

.NOTES
    Author: Craig
    Date: 2024-11-03
    Version: 1.3
#>

param (
    [string]$sourceFolder
)

# Check for administrative privileges
if (-not ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")) {
    Write-Error "This script must be run as an administrator."
    exit 1
}

Write-Output "Starting SSH key management process..."

# Ensure ssh-agent service is set to start automatically and is running
Write-Output "Ensuring ssh-agent service is running..."
Get-Service ssh-agent | Set-Service -StartupType Automatic -PassThru | Start-Service
Write-Output "ssh-agent service is running."

# Define the destination folder as the .ssh directory in the user's profile
$destinationFolder = "$($env:USERPROFILE)\.ssh"

# Create the .ssh folder if it doesn't exist
if (!(Test-Path -Path $destinationFolder)) {
    Write-Output "Creating .ssh directory at $destinationFolder..."
    New-Item -ItemType Directory -Path $destinationFolder | Out-Null
    Write-Output ".ssh directory created."
} else {
    Write-Output ".ssh directory already exists at $destinationFolder."
}

# Process .key files: copy to .ssh, add to ssh-agent
Write-Output "Processing private keys from $sourceFolder..."
Get-ChildItem -Path $sourceFolder -Recurse -Filter "*.key" | ForEach-Object {
    $sourceFile = $_.FullName
    $destinationFile = Join-Path -Path $destinationFolder -ChildPath $_.Name
    
    # Log the file being processed
    Write-Output "Processing file: $sourceFile"

    # Copy the key file to the .ssh directory
    Copy-Item -Path $sourceFile -Destination $destinationFile -Force
    Write-Output "Copied: $sourceFile to $destinationFile"
    
    # Add the key to the ssh-agent
    ssh-add $destinationFile
    Write-Output "Added key to ssh-agent: $destinationFile"
}

Write-Output "All private keys added to ssh-agent."

# Remove all .key files from the .ssh directory
Write-Output "Cleaning up .ssh directory by removing all .key files..."
Get-ChildItem -Path $destinationFolder -Filter "*.key" | ForEach-Object {
    Write-Output "Removing key file: $($_.FullName)"
    Remove-Item -Path $_.FullName -Force
    Write-Output "Removed key file: $($_.FullName)"
}

# Define the path to the SSH config file
$sshConfigFile = Join-Path -Path $destinationFolder -ChildPath "config"

# Check if config file exists, create if it doesn't
if (!(Test-Path -Path $sshConfigFile)) {
    Write-Output "Creating SSH config file at $sshConfigFile..."
    New-Item -ItemType File -Path $sshConfigFile | Out-Null
    Write-Output "SSH config file created."
} else {
    Write-Output "SSH config file already exists at $sshConfigFile."
}

# Define the new host configuration as a string
$newHostConfig = @"
# Default settings for all hosts
Host *
    ForwardAgent yes
    AddKeysToAgent yes
    IdentityFile ~/.ssh/id_rsa
    ServerAliveInterval 60
    ServerAliveCountMax 3

# Specific host configuration
Host host-01
    HostName host-01
    User craig
    port 22

"@

# Append the new host configuration to the SSH config file
Write-Output "Appending new host configurations to SSH config file..."
Add-Content -Path $sshConfigFile -Value $newHostConfig
Write-Output "New host configurations added to SSH config."

Write-Output "SSH key management process completed."