Delete all devices on the Tailnet except for no expiry devices

ts_delete_devices.sh

#!/bin/bash
# Delete all devices on the Tailnet except for no expiry devices
# Released under the MIT license
set -eo pipefail

TAILSCALE_TAILNET=${TAILSCALE_TAILNET:-}
TAILSCALE_API_KEY=${TAILSCALE_API_KEY:-}
SCRIPT_REAL_RUN=${SCRIPT_REAL_RUN:false}

if [ -z "${TAILSCALE_API_KEY}" ]; then
  echo "[ERROR] TAILSCALE_API_KEY is not set"
  exit 1
fi

if [ -z "${TAILSCALE_TAILNET}" ]; then
  echo "[ERROR] TAILSCALE_TAILNET is not set"
  exit 1
fi

if [ "${SCRIPT_REAL_RUN}" != "true" ]; then
  echo "[INFO] DRY RUN"
fi

devices=$(curl -s -u "${TAILSCALE_API_KEY}:" "https://api.tailscale.com/api/v2/tailnet/${TAILSCALE_TAILNET}/devices" | jq -r '.devices[] | select(.keyExpiryDisabled == false) | .id')

for device_id in $devices; do
  echo "[INFO] Deleting" $device_id
  if [ "${SCRIPT_REAL_RUN}" = "true" ]; then
    curl -X DELETE -s -u "${TAILSCALE_API_KEY}:" "https://api.tailscale.com/api/v2/device/${device_id}"
    sleep 1
  fi
done