(CommandList
  children: [
    (C {(set)} {(-o)} {(errexit)})
    (C {(set)} {(-o)} {(nounset)})
    (C {(set)} {(-o)} {(pipefail)})
    (Assignment
      keyword: Assign_None
      pairs: [(assign_pair lhs:(LhsName name:VOLUME) op:Equal rhs:{(${ VSub_Name HOME)} spids:[92])]
      spids: [92]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:ALLOW)
          op: Equal
          rhs: 
            {
              (CommandSubPart
                command_list: 
                  (CommandList
                    children: [
                      (Pipeline
                        children: [
                          (C {(ip)} {(route)})
                          (C {(awk)} 
                            {
                              (SQ 
                                <
"/^default via/ { reg = \"^[0-9./]+ dev \"$5 } ; $0 ~ reg { print $1 }"
                                >
                              )
                            }
                          )
                        ]
                        negated: False
                      )
                    ]
                  )
                left_token: <Left_CommandSub "$(">
                spids: [105 117]
              )
            }
          spids: [104]
        )
      ]
      spids: [104]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:CONFDIR)
          op: Equal
          rhs: {(DQ (/tmp/rsync.k8s))}
          spids: [120]
        )
      ]
      spids: [120]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:PIDFILE)
          op: Equal
          rhs: {(DQ (${ VSub_Name CONFDIR) (/rsyncd.pid))}
          spids: [125]
        )
      ]
      spids: [125]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:CONFFILE)
          op: Equal
          rhs: {(DQ (${ VSub_Name CONFDIR) (/rsyncd.conf))}
          spids: [133]
        )
      ]
      spids: [133]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:SECRETS)
          op: Equal
          rhs: {(DQ (${ VSub_Name CONFDIR) (/rsyncd.secrets))}
          spids: [141]
        )
      ]
      spids: [141]
    )
    (C {(mkdir)} {(-p)} {(DQ (${ VSub_Name CONFDIR))})
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: (DBracket expr:(BoolUnary op_id:BoolUnary_f child:{(DQ (${ VSub_Name PIDFILE))}))
              terminator: <Op_Semi ";">
            )
          ]
          action: [
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:PID)
                  op: Equal
                  rhs: 
                    {
                      (CommandSubPart
                        command_list: 
                          (CommandList
                            children: [(C {(cat)} {(DQ (${ VSub_Name PIDFILE))})]
                          )
                        left_token: <Left_CommandSub "$(">
                        spids: [180 188]
                      )
                    }
                  spids: [179]
                )
              ]
              spids: [179]
            )
            (C {(echo)} {(DQ ("Cleaning up old PID file: ") (${ VSub_Name PIDFILE))})
            (Sentence child:(C {(kill)} {($ VSub_Name "$PID")}) terminator:<Op_Amp "&">)
            (AndOr
              children: [
                (SimpleCommand
                  redirects: [(Redir op_id:Redir_Great fd:-1 arg_word:{(/dev/null)} spids:[206])]
                )
                (C {(true)})
              ]
              op_id: Op_DPipe
            )
            (C {(rm)} {(DQ (${ VSub_Name PIDFILE))})
          ]
          spids: [-1 176]
        )
      ]
      spids: [-1 223]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:PASSWORD)
          op: Equal
          rhs: 
            {
              (CommandSubPart
                command_list: 
                  (CommandList
                    children: [
                      (SimpleCommand
                        redirects: [
                          (Redir
                            op_id: Redir_Less
                            fd: -1
                            arg_word: {(/rsyncd.password)}
                            spids: [228]
                          )
                        ]
                      )
                    ]
                  )
                left_token: <Left_CommandSub "$(">
                spids: [227 230]
              )
            }
          spids: [226]
        )
      ]
      spids: [226]
    )
    (SimpleCommand
      words: [{(cat)}]
      redirects: [
        (HereDoc
          op_id: Redir_DLess
          fd: -1
          body: {(DQ ("k8s:") (${ VSub_Name PASSWORD) ("\n"))}
          do_expansion: True
          here_end: EOF
          was_filled: True
          spids: [235]
        )
        (Redir op_id:Redir_Great fd:-1 arg_word:{(DQ (${ VSub_Name SECRETS))} spids:[238])
      ]
    )
    (C {(chmod)} {(Lit_VarLike "go=")} {(DQ (${ VSub_Name SECRETS))})
    (Assignment
      keyword: Assign_None
      pairs: [(assign_pair lhs:(LhsName name:USER_CONFIG) op:Equal rhs:{(SQ )} spids:[261])]
      spids: [261]
    )
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: 
                (DBracket
                  expr: 
                    (BoolBinary
                      op_id: BoolBinary_GlobDEqual
                      left: 
                        {
                          (DQ 
                            (CommandSubPart
                              command_list: (CommandList children:[(C {(id)} {(-u)})])
                              left_token: <Left_CommandSub "$(">
                              spids: [268 272]
                            )
                          )
                        }
                      right: {(DQ (0))}
                    )
                )
              terminator: <Op_Semi ";">
            )
          ]
          action: [
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:USER_CONFIG)
                  op: Equal
                  rhs: {(DQ ("  uid = 0")) (SQ <Lit_EscapedChar "\\n">) (DQ ("  gid = 0"))}
                  spids: [287]
                )
              ]
              spids: [287]
            )
          ]
          spids: [-1 284]
        )
      ]
      spids: [-1 298]
    )
    (SimpleCommand
      words: [{(cat)}]
      redirects: [
        (HereDoc
          op_id: Redir_DLess
          fd: -1
          body: 
            {
              (DQ ("pid file = ") (${ VSub_Name PIDFILE) ("\n") ("use chroot = no\n") 
                ("log file = /dev/stdout\n") ("reverse lookup = no\n") ("munge symlinks = no\n") ("port = 8730\n") ("[k8s]\n") 
                ("  numeric ids = true\n") ("  ") ($ VSub_Name "$USER_CONFIG") ("\n") ("  hosts deny = *\n") ("  hosts allow = ") 
                (${ VSub_Name ALLOW) (" ") 
                (BracedVarSub
                  token: <VSub_Name ALLOW_HOST>
                  suffix_op: (StringUnary op_id:VTest_Hyphen arg_word:{(SQ )})
                  spids: [334 337]
                ) ("\n") ("  auth users = k8s\n") ("  secrets file = ") (${ VSub_Name SECRETS) ("\n") 
                ("  read only = false\n") ("  path = ") (${ VSub_Name VOLUME) ("\n") ("  filter = - /.make/ - /_tmp/\n")
              )
            }
          do_expansion: True
          here_end: EOF
          was_filled: True
          spids: [303]
        )
        (Redir op_id:Redir_Great fd:-1 arg_word:{(DQ (${ VSub_Name CONFFILE))} spids:[306])
      ]
    )
    (C {(exec)} {(/usr/bin/rsync)} {(--no-detach)} {(--daemon)} 
      {(--config) (Lit_Other "=") (DQ (${ VSub_Name CONFFILE))} {(DQ ($ VSub_At "$@"))}
    )
  ]
)