coder
diff --git a/‎coderd/database/dbauthz/dbauthz.go
Lines changed: 14 additions & 0 deletions b/‎coderd/database/dbauthz/dbauthz.go
Lines changed: 14 additions & 0 deletions
diff --git a/‎coderd/database/dbmem/dbmem.go
Lines changed: 8 additions & 0 deletions b/‎coderd/database/dbmem/dbmem.go
Lines changed: 8 additions & 0 deletions
diff --git a/‎coderd/database/dbmetrics/dbmetrics.go
Lines changed: 14 additions & 0 deletions b/‎coderd/database/dbmetrics/dbmetrics.go
Lines changed: 14 additions & 0 deletions
diff --git a/‎coderd/database/dbmock/dbmock.go
Lines changed: 28 additions & 0 deletions b/‎coderd/database/dbmock/dbmock.go
Lines changed: 28 additions & 0 deletions
diff --git a/‎coderd/database/querier.go
Lines changed: 2 additions & 0 deletions b/‎coderd/database/querier.go
Lines changed: 2 additions & 0 deletions
diff --git a/‎coderd/database/queries.sql.go
Lines changed: 25 additions & 0 deletions b/‎coderd/database/queries.sql.go
Lines changed: 25 additions & 0 deletions
diff --git a/‎coderd/database/queries/tailnet.sql
Lines changed: 13 additions & 0 deletions b/‎coderd/database/queries/tailnet.sql
Lines changed: 13 additions & 0 deletions
@@ -695,6 +695,20 @@ func (q *querier) CleanTailnetCoordinators(ctx context.Context) error {
 	return q.db.CleanTailnetCoordinators(ctx)
 }
 
+func (q *querier) CleanTailnetLostPeers(ctx context.Context) error {
+	if err := q.authorizeContext(ctx, rbac.ActionDelete, rbac.ResourceTailnetCoordinator); err != nil {
+		return err
+	}
+	return q.db.CleanTailnetLostPeers(ctx)
+}
+
+func (q *querier) CleanTailnetTunnels(ctx context.Context) error {
+	if err := q.authorizeContext(ctx, rbac.ActionDelete, rbac.ResourceTailnetCoordinator); err != nil {
+		return err
+	}
+	return q.db.CleanTailnetTunnels(ctx)
+}
+
 func (q *querier) DeleteAPIKeyByID(ctx context.Context, id string) error {
 	return deleteQ(q.log, q.auth, q.db.GetAPIKeyByID, q.db.DeleteAPIKeyByID)(ctx, id)
 }
 
@@ -956,6 +956,14 @@ func (*FakeQuerier) CleanTailnetCoordinators(_ context.Context) error {
 	return ErrUnimplemented
 }
 
+func (*FakeQuerier) CleanTailnetLostPeers(context.Context) error {
+	return ErrUnimplemented
+}
+
+func (*FakeQuerier) CleanTailnetTunnels(context.Context) error {
+	return ErrUnimplemented
+}
+
 func (q *FakeQuerier) DeleteAPIKeyByID(_ context.Context, id string) error {
 	q.mutex.Lock()
 	defer q.mutex.Unlock()
 
@@ -122,6 +122,19 @@ DELETE
 FROM tailnet_coordinators
 WHERE heartbeat_at < now() - INTERVAL '24 HOURS';
 
+-- name: CleanTailnetLostPeers :exec
+DELETE
+FROM tailnet_peers
+WHERE updated_at < now() - INTERVAL '24 HOURS' AND status = 'lost'::tailnet_status;
+
+-- name: CleanTailnetTunnels :exec
+DELETE FROM tailnet_tunnels
+WHERE updated_at < now() - INTERVAL '24 HOURS' AND
+      NOT EXISTS (
+        SELECT 1 FROM tailnet_peers
+        WHERE id = tailnet_tunnels.src_id AND coordinator_id = tailnet_tunnels.coordinator_id
+      );
+
 -- name: UpsertTailnetPeer :one
 INSERT INTO
 	tailnet_peers (