#!/bin/bash
# ==============================================================================
# 05-stop-fips.sh
#
# Stop single FIPS node and clean up route.
#
# Usage:
#   sudo bash 05-stop-fips.sh
# ==============================================================================
set -euo pipefail

echo "=== Stopping FIPS (single node) ==="
echo ""

if [ "$(id -u)" -ne 0 ]; then
    echo "✗ This script must be run as root (sudo)"
    exit 1
fi

systemctl stop fips 2>/dev/null || true
ip -6 route del fd00::/8 dev fips0 2>/dev/null || true

echo "✓ fips service stopped"
if ip link show fips0 >/dev/null 2>&1; then
    echo "  fips0 still present (will disappear when process exits completely)"
else
    echo "  fips0 removed"
fi

echo ""
echo "Done"