tailscale-custom/tray-deploy.ps1

# tray-deploy.ps1
$ErrorActionPreference = "Stop"

$isAdmin = ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole(
    [Security.Principal.WindowsBuiltInRole]::Administrator
)
if (-not $isAdmin) {
    $log = "$env:TEMP\tray-deploy-log.txt"
    Remove-Item $log -ErrorAction SilentlyContinue
    Start-Process powershell -Verb RunAs -Wait `
        -ArgumentList "-ExecutionPolicy Bypass -File `"$PSCommandPath`""
    Start-Sleep -Milliseconds 800
    if (Test-Path $log) { Get-Content $log } else { Write-Warning "No log" }
    exit
}

Start-Transcript -Path "$env:TEMP\tray-deploy-log.txt" -Force | Out-Null

$src = "C:\Users\huanld\tailscale\dist\tailscale-tray.exe"
$dst = "C:\Program Files\Tailscale-Custom\tailscale-tray.exe"

Write-Host "=== KY TRAY ==="
$cert = Get-ChildItem Cert:\LocalMachine\My |
    Where-Object { $_.Subject -eq "CN=Tailscale-Custom, O=SoftsBusiness, C=VN" -and $_.HasPrivateKey } |
    Sort-Object NotAfter -Descending | Select-Object -First 1
if (-not $cert) { Write-Error "Khong tim thay cert"; Stop-Transcript | Out-Null; exit 1 }

$r = Set-AuthenticodeSignature -FilePath $src -Certificate $cert `
     -TimestampServer "http://timestamp.digicert.com" -HashAlgorithm SHA256 -ErrorAction SilentlyContinue
if (-not $r -or $r.Status -notin @("Valid")) {
    $r = Set-AuthenticodeSignature -FilePath $src -Certificate $cert -HashAlgorithm SHA256
}
Write-Host "  Ky: $($r.Status)"

Write-Host "`n=== KILL TRAY CU ==="
Stop-Process -Name tailscale-tray -Force -ErrorAction SilentlyContinue
Start-Sleep -Seconds 1
Write-Host "  Done"

Write-Host "`n=== COPY ==="
Copy-Item $src $dst -Force
$info = Get-Item $dst
Write-Host "  $dst"
Write-Host "  Size: $([math]::Round($info.Length/1MB,1)) MB | Date: $($info.LastWriteTime)"

Write-Host "`n=== START TRAY MOI ==="
Start-Process $dst
Write-Host "  Started: $dst"

Stop-Transcript | Out-Null