(CommandList
  children: [
    (C {(set)} {(-o)} {(errexit)})
    (C {(set)} {(-o)} {(nounset)})
    (C {(set)} {(-o)} {(pipefail)})
    (Assignment
      keyword: Assign_None
      pairs: [(assign_pair lhs:(LhsName name:VOLUME) op:Equal rhs:{(${ VSub_Name HOME)} spids:[92])]
      spids: [92]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:ALLOW)
          op: Equal
          rhs: 
            {
              (CommandSubPart
                command_list: 
                  (CommandList
                    children: [
                      (Pipeline
                        children: [
                          (C {(ip)} {(route)})
                          (C {(awk)} 
                            {
                              (SQ 
                                <
'/^default via/ { reg = "^[0-9./]+ dev "$5 } ; $0 ~ reg { print $1 }'
                                >
                              )
                            }
                          )
                        ]
                        negated: F
                      )
                    ]
                  )
                left_token: <Left_CommandSub '$('>
                spids: [105 117]
              )
            }
          spids: [104]
        )
      ]
      spids: [104]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:CONFDIR)
          op: Equal
          rhs: {(DQ (/tmp/rsync.k8s))}
          spids: [120]
        )
      ]
      spids: [120]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:PIDFILE)
          op: Equal
          rhs: {(DQ (${ VSub_Name CONFDIR) (/rsyncd.pid))}
          spids: [125]
        )
      ]
      spids: [125]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:CONFFILE)
          op: Equal
          rhs: {(DQ (${ VSub_Name CONFDIR) (/rsyncd.conf))}
          spids: [133]
        )
      ]
      spids: [133]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:SECRETS)
          op: Equal
          rhs: {(DQ (${ VSub_Name CONFDIR) (/rsyncd.secrets))}
          spids: [141]
        )
      ]
      spids: [141]
    )
    (C {(mkdir)} {(-p)} {(DQ (${ VSub_Name CONFDIR))})
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: (DBracket expr:(BoolUnary op_id:BoolUnary_f child:{(DQ (${ VSub_Name PIDFILE))}))
              terminator: <Op_Semi ';'>
            )
          ]
          action: [
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:PID)
                  op: Equal
                  rhs: 
                    {
                      (CommandSubPart
                        command_list: 
                          (CommandList
                            children: [(C {(cat)} {(DQ (${ VSub_Name PIDFILE))})]
                          )
                        left_token: <Left_CommandSub '$('>
                        spids: [180 188]
                      )
                    }
                  spids: [179]
                )
              ]
              spids: [179]
            )
            (C {(echo)} {(DQ ('Cleaning up old PID file: ') (${ VSub_Name PIDFILE))})
            (Sentence child:(C {(kill)} {($ VSub_Name '$PID')}) terminator:<Op_Amp '&'>)
            (AndOr
              ops: [Op_DPipe]
              children: [
                (SimpleCommand
                  redirects: [
                    (Redir
                      op_id: Redir_Great
                      fd: 16777215
                      arg_word: {(/dev/null)}
                      spids: [206]
                    )
                  ]
                )
                (C {(true)})
              ]
            )
            (C {(rm)} {(DQ (${ VSub_Name PIDFILE))})
          ]
          spids: [16777215 176]
        )
      ]
      spids: [16777215 223]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:PASSWORD)
          op: Equal
          rhs: 
            {
              (CommandSubPart
                command_list: 
                  (CommandList
                    children: [
                      (SimpleCommand
                        redirects: [
                          (Redir
                            op_id: Redir_Less
                            fd: 16777215
                            arg_word: {(/rsyncd.password)}
                            spids: [228]
                          )
                        ]
                      )
                    ]
                  )
                left_token: <Left_CommandSub '$('>
                spids: [227 230]
              )
            }
          spids: [226]
        )
      ]
      spids: [226]
    )
    (SimpleCommand
      words: [{(cat)}]
      redirects: [
        (HereDoc
          op_id: Redir_DLess
          fd: 16777215
          body: {(DQ ('k8s:') (${ VSub_Name PASSWORD) ('\n'))}
          do_expansion: True
          here_end: EOF
          was_filled: T
          spids: [235]
        )
        (Redir
          op_id: Redir_Great
          fd: 16777215
          arg_word: {(DQ (${ VSub_Name SECRETS))}
          spids: [238]
        )
      ]
    )
    (C {(chmod)} {(Lit_VarLike 'go=')} {(DQ (${ VSub_Name SECRETS))})
    (Assignment
      keyword: Assign_None
      pairs: [(assign_pair lhs:(LhsName name:USER_CONFIG) op:Equal rhs:{(EmptyPart)} spids:[262])]
      spids: [262]
    )
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: 
                (DBracket
                  expr: 
                    (BoolBinary
                      op_id: BoolBinary_GlobDEqual
                      left: 
                        {
                          (DQ 
                            (CommandSubPart
                              command_list: (CommandList children:[(C {(id)} {(-u)})])
                              left_token: <Left_CommandSub '$('>
                              spids: [269 273]
                            )
                          )
                        }
                      right: {(DQ (0))}
                    )
                )
              terminator: <Op_Semi ';'>
            )
          ]
          action: [
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:USER_CONFIG)
                  op: Equal
                  rhs: 
                    {(DQ ('  uid = 0')) 
                      (SingleQuotedPart
                        left: <Left_DollarSingleQuote "$'">
                        tokens: [<Char_OneChar '\\n'>]
                      ) (DQ ('  gid = 0'))
                    }
                  spids: [288]
                )
              ]
              spids: [288]
            )
          ]
          spids: [16777215 285]
        )
      ]
      spids: [16777215 299]
    )
    (SimpleCommand
      words: [{(cat)}]
      redirects: [
        (HereDoc
          op_id: Redir_DLess
          fd: 16777215
          body: 
            {
              (DQ ('pid file = ') (${ VSub_Name PIDFILE) ('\n') ('use chroot = no\n') 
                ('log file = /dev/stdout\n') ('reverse lookup = no\n') ('munge symlinks = no\n') ('port = 8730\n') ('[k8s]\n') 
                ('  numeric ids = true\n') ('  ') ($ VSub_Name '$USER_CONFIG') ('\n') ('  hosts deny = *\n') ('  hosts allow = ') 
                (${ VSub_Name ALLOW) (' ') 
                (BracedVarSub
                  token: <VSub_Name ALLOW_HOST>
                  suffix_op: (StringUnary op_id:VTest_Hyphen arg_word:{(EmptyPart)})
                  spids: [335 338]
                ) ('\n') ('  auth users = k8s\n') ('  secrets file = ') (${ VSub_Name SECRETS) ('\n') 
                ('  read only = false\n') ('  path = ') (${ VSub_Name VOLUME) ('\n') ('  filter = - /.make/ - /_tmp/\n')
              )
            }
          do_expansion: True
          here_end: EOF
          was_filled: T
          spids: [304]
        )
        (Redir
          op_id: Redir_Great
          fd: 16777215
          arg_word: {(DQ (${ VSub_Name CONFFILE))}
          spids: [307]
        )
      ]
    )
    (C {(exec)} {(/usr/bin/rsync)} {(--no-detach)} {(--daemon)} 
      {(--config) (Lit_Other '=') (DQ (${ VSub_Name CONFFILE))} {(DQ ($ VSub_At '$@'))}
    )
  ]
)