(Windows) Automated client Deployment with API auto-authorize, FQDN name pushing, dns config

[daymr]

I hope someone else finds this useful. It was created with blood sweat and tears! Now.. eagerly awaiting API functionality for Organization Networks!!!!!! (This also has logic for API calls to server behind reverse proxy!)

###################################################################################################################################
####################   Zerotier Master Deployment Script for Windows    ###########################################################
####################          by: Matthew Day                           ###########################################################
###################################################################################################################################
#### This is a Master SCript for deploying Zerotier to windows machines. This allows the automation of 
#### assimilation of all machines into the network.
#
### Here's a breakdown of what the script does:
#
#   1. Sets the network ID, base URL, and authentication token.
#   2. Checks if ZeroTier is installed and updates it if necessary.
#   3. Joins the ZeroTier network if not already a member.
#   4. Allows ZeroTier DNS resolution.
#   5. Retrieves the Node ID 
#   6. Uses API Post to change name of node on controller to match FQDN hostname
#   7. Authorizes the node, bringing it live on the network
#
#   This is now fully automated, with no need to use the web gui
###################################################################################################################################
###################################################################################################################################


### Set ONLY these three Variables #######

# Set network ID
$networkId = "" #This is the Unique Zerotier Network ID

# Define base URL
$baseUrl = ''  #This is the Base URL of the ztnet controller

# Define authentication token (API token)
$authToken = ''

###################################################################################################################################
###################################################################################################################################
######## DO NOT EDIT ANYTHING BELOW THIS LINE !!!!!!!!!!!!!!!!!####################################################################
###################################################################################################################################
###################################################################################################################################


# Check if ZeroTier is installed
if (-not (Test-Path -Path "C:\Program Files\ZeroTier\ZeroTier One.exe")) {
    # ZeroTier is not installed, so install it
    Invoke-WebRequest -Uri "https://download.zerotier.com/dist/ZeroTier%20One.msi" -OutFile "ZeroTier.msi"
    Start-Process -FilePath "msiexec.exe" -ArgumentList "/i ZeroTier.msi /quiet" -Wait
} else {
    # ZeroTier is already installed, check if it's the newest version
    $currentVersion = (Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZeroTier One_is1" -Name DisplayVersion).DisplayVersion
    $latestVersion = (Invoke-WebRequest -Uri "https://github.com/zerotier/ZeroTierOne/releases/latest" -UseBasicParsing).BaseResponse.ResponseUri.Segments[-1].TrimEnd('/')
    
    if ($currentVersion -eq $latestVersion) {
        Write-Host "ZeroTier is already installed and up to date."
    } else {
        # ZeroTier is installed but not the newest version, so update it
        Write-Host "Updating ZeroTier..."
        Invoke-WebRequest -Uri "https://download.zerotier.com/dist/ZeroTier%20One.msi" -OutFile "ZeroTier.msi"
        Start-Process -FilePath "msiexec.exe" -ArgumentList "/i ZeroTier.msi /quiet" -Wait
    }
}



# Check if already a member of ZeroTier network
$networkInfo = zerotier-cli listnetworks | Out-String
if ($networkInfo -notmatch $networkId) {
    # Not a member of the network, so join
    $joinOutput = zerotier-cli join $networkId
    Write-Host $joinOutput
} else {
    Write-Host "Already a member of the ZeroTier network."
}

# Allow Zerotier DNS
zerotier-cli set $networkId allowDNS=true


# Retrieve Node ID using ZeroTier API
$nodeId = (Get-Content "C:\ProgramData\ZeroTier\One\identity.public" | Select-String -Pattern ':' -SimpleMatch | Select-Object -ExpandProperty Line | ForEach-Object { $_.Split(':')[0] })



# Define URL without trailing slash
$url = $baseUrl + '/api/v1/network/' + $networkId + '/member/' + $nodeId

# Define headers
$headers = @{
    'Content-Type' = 'application/json'
    'Accept' = 'application/json'
    'x-ztnet-auth' = $authToken
}

# Define User-Agent
$userAgent = 'curl/7.68.0'

# Define name
$name = (Get-WmiObject Win32_ComputerSystem).DNSHostName + "." + (Get-WmiObject Win32_ComputerSystem).Domain

# Create WebRequest object
$webRequest = [System.Net.WebRequest]::Create($url)
$webRequest.Method = 'POST'
$webRequest.ContentType = 'application/json'
$webRequest.Accept = 'application/json'
$webRequest.Headers.Add("x-ztnet-auth", $headers['x-ztnet-auth'])

# Set User-Agent
$webRequest.UserAgent = $userAgent

# Allow auto redirection
$webRequest.AllowAutoRedirect = $false

# Convert data to JSON
$data = @{
    'name' = $name
    'authorized' = 'true'
}

$jsonData = $data | ConvertTo-Json

try {
    # Convert JSON data to bytes
    $jsonBytes = [System.Text.Encoding]::UTF8.GetBytes($jsonData)
    
    # Send request and get response
    $stream = $webRequest.GetRequestStream()
    $stream.Write($jsonBytes, 0, $jsonBytes.Length)
    $stream.Close()

    $response = $webRequest.GetResponse()

    # Check for redirect
    if ($response.StatusCode -eq '308') {
        $redirectUrl = $baseUrl + $response.Headers['Location']
        Write-Host "Redirecting to: $redirectUrl"
        $response.Close()
        
        # Create new WebRequest for redirected URL
        $webRequest = [System.Net.WebRequest]::Create($redirectUrl)
        $webRequest.Method = 'POST'
        $webRequest.ContentType = 'application/json'
        $webRequest.Accept = 'application/json'
        $webRequest.Headers.Add("x-ztnet-auth", $headers['x-ztnet-auth'])
        $webRequest.UserAgent = $userAgent
        $webRequest.AllowAutoRedirect = $false
        
        # Send request again
        $stream = $webRequest.GetRequestStream()
        $stream.Write($jsonBytes, 0, $jsonBytes.Length)
        $stream.Close()

        $response = $webRequest.GetResponse()
    }

    # Read response
    $reader = New-Object System.IO.StreamReader($response.GetResponseStream())
    $responseContent = $reader.ReadToEnd()

    # Output response content
    Write-Host "Response:"
    $responseContent
} catch {
    Write-Host "Error occurred: $_"
}

[komfox]

Hi,
How to run it on windows ?