Add cf.py
This commit is contained in:
parent
7ae066c4c5
commit
b1f5356558
1 changed files with 256 additions and 0 deletions
256
cf.py
Normal file
256
cf.py
Normal file
|
|
@ -0,0 +1,256 @@
|
||||||
|
#!/usr/bin/env python3
|
||||||
|
|
||||||
|
import os
|
||||||
|
import sys
|
||||||
|
import yaml
|
||||||
|
import requests
|
||||||
|
import subprocess
|
||||||
|
from datetime import datetime
|
||||||
|
from loguru import logger
|
||||||
|
from dotenv import load_dotenv
|
||||||
|
from pathlib import Path
|
||||||
|
|
||||||
|
# Constants
|
||||||
|
SCRIPT_DIR = Path(__file__).resolve().parent
|
||||||
|
CADDYFILE_PATH = "/etc/caddy/Caddyfile"
|
||||||
|
CF_DOMAINS_FILE = SCRIPT_DIR / 'cf_domains.yaml'
|
||||||
|
ENV_FILE = SCRIPT_DIR / '.env'
|
||||||
|
LOG_FILE = SCRIPT_DIR / 'cf_script.log'
|
||||||
|
|
||||||
|
# Load environment variables
|
||||||
|
load_dotenv(ENV_FILE)
|
||||||
|
|
||||||
|
# Configure logger
|
||||||
|
logger.remove() # Remove default handler
|
||||||
|
logger.add(sys.stderr, format="<green>{time:YYYY-MM-DD HH:mm:ss}</green> <level>{level}</level> {message}", level="INFO", colorize=True)
|
||||||
|
logger.add(LOG_FILE, format="{time:YYYY-MM-DD HH:mm:ss} {level} {message}", rotation="10 MB", retention="1 week", level="DEBUG")
|
||||||
|
|
||||||
|
def get_current_ip():
|
||||||
|
return requests.get('https://am.i.mullvad.net/ip').text.strip()
|
||||||
|
|
||||||
|
def update_env_ip(ip):
|
||||||
|
env_vars = {}
|
||||||
|
if ENV_FILE.exists():
|
||||||
|
with open(ENV_FILE, 'r') as f:
|
||||||
|
for line in f:
|
||||||
|
if '=' in line:
|
||||||
|
key, value = line.strip().split('=', 1)
|
||||||
|
env_vars[key] = value
|
||||||
|
|
||||||
|
env_vars['CURRENT_IP'] = ip
|
||||||
|
|
||||||
|
with open(ENV_FILE, 'w') as f:
|
||||||
|
for key, value in env_vars.items():
|
||||||
|
f.write(f"{key}={value}\n")
|
||||||
|
|
||||||
|
def sort_yaml():
|
||||||
|
with open(CF_DOMAINS_FILE, 'r') as file:
|
||||||
|
data = yaml.safe_load(file)
|
||||||
|
|
||||||
|
sorted_data = dict(sorted(data.items()))
|
||||||
|
|
||||||
|
for domain, subdomains in sorted_data.items():
|
||||||
|
if isinstance(subdomains, dict):
|
||||||
|
sorted_data[domain] = dict(sorted(subdomains.items()))
|
||||||
|
|
||||||
|
with open(CF_DOMAINS_FILE, 'w') as file:
|
||||||
|
yaml.dump(sorted_data, file, sort_keys=False)
|
||||||
|
|
||||||
|
def usage():
|
||||||
|
logger.error("Incorrect usage")
|
||||||
|
print("Usage: cf <full-domain> [--ip <ip address>] --port <port>")
|
||||||
|
print(" cf ddns [--force]")
|
||||||
|
print(" cf all [--force]")
|
||||||
|
sys.exit(1)
|
||||||
|
|
||||||
|
def update_caddyfile(full_domain, caddy_ip, port):
|
||||||
|
with open(CADDYFILE_PATH, 'a') as file:
|
||||||
|
file.write(f"""
|
||||||
|
{full_domain} {{
|
||||||
|
reverse_proxy {caddy_ip}:{port}
|
||||||
|
tls {{
|
||||||
|
dns cloudflare {{env.CLOUDFLARE_API_TOKEN}}
|
||||||
|
}}
|
||||||
|
}}
|
||||||
|
""")
|
||||||
|
logger.info(f"Configuration appended to {CADDYFILE_PATH} with correct formatting.")
|
||||||
|
|
||||||
|
def update_dns_record(zone_id, dns_id, name, ip):
|
||||||
|
url = f'https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records/{dns_id}'
|
||||||
|
headers = {
|
||||||
|
'Authorization': f'Bearer {os.getenv("CLOUDFLARE_API_TOKEN")}',
|
||||||
|
'Content-Type': 'application/json'
|
||||||
|
}
|
||||||
|
data = {
|
||||||
|
'type': 'A',
|
||||||
|
'name': name,
|
||||||
|
'content': ip,
|
||||||
|
'ttl': 120,
|
||||||
|
'proxied': True
|
||||||
|
}
|
||||||
|
response = requests.put(url, headers=headers, json=data)
|
||||||
|
return response.json()
|
||||||
|
|
||||||
|
def ddns(force=False):
|
||||||
|
current_ip = get_current_ip()
|
||||||
|
last_ip = os.getenv('CURRENT_IP')
|
||||||
|
|
||||||
|
if current_ip != last_ip or force:
|
||||||
|
update_env_ip(current_ip)
|
||||||
|
|
||||||
|
with open(CF_DOMAINS_FILE, 'r') as f:
|
||||||
|
domains = yaml.safe_load(f)
|
||||||
|
|
||||||
|
for domain, data in domains.items():
|
||||||
|
zone_id = data['_id']
|
||||||
|
for subdomain, dns_id in data.items():
|
||||||
|
if subdomain == '_id':
|
||||||
|
continue
|
||||||
|
full_domain = f"{subdomain}.{domain}" if subdomain != '@' else domain
|
||||||
|
logger.info(f"Updating {full_domain}")
|
||||||
|
result = update_dns_record(zone_id, dns_id, full_domain, current_ip)
|
||||||
|
if result.get('success'):
|
||||||
|
logger.info(f"Successfully updated {full_domain}")
|
||||||
|
else:
|
||||||
|
logger.error(f"Failed to update {full_domain}: {result.get('errors', 'Unknown error')}")
|
||||||
|
|
||||||
|
logger.info(f"DDNS update completed at {datetime.utcnow().strftime('%Y-%m-%d %H:%M:%S')} UTC")
|
||||||
|
else:
|
||||||
|
logger.info("IP address hasn't changed. No updates needed.")
|
||||||
|
|
||||||
|
def get_existing_record(zone_id, name):
|
||||||
|
url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records?type=A&name={name}"
|
||||||
|
headers = {
|
||||||
|
"Authorization": f"Bearer {os.getenv('CLOUDFLARE_API_TOKEN')}",
|
||||||
|
"Content-Type": "application/json"
|
||||||
|
}
|
||||||
|
response = requests.get(url, headers=headers)
|
||||||
|
result = response.json()
|
||||||
|
if result.get('success') and result['result']:
|
||||||
|
return result['result'][0]
|
||||||
|
return None
|
||||||
|
|
||||||
|
def update_or_create_record(zone_id, subdomain, domain, cloudflare_ip):
|
||||||
|
# For root domain, we need to use the full domain name instead of "@"
|
||||||
|
full_name = domain if subdomain == "@" else f"{subdomain}.{domain}"
|
||||||
|
|
||||||
|
existing_record = get_existing_record(zone_id, full_name)
|
||||||
|
|
||||||
|
headers = {
|
||||||
|
"Authorization": f"Bearer {os.getenv('CLOUDFLARE_API_TOKEN')}",
|
||||||
|
"Content-Type": "application/json"
|
||||||
|
}
|
||||||
|
data = {
|
||||||
|
"type": "A",
|
||||||
|
"name": full_name,
|
||||||
|
"content": cloudflare_ip,
|
||||||
|
"ttl": 120,
|
||||||
|
"proxied": True
|
||||||
|
}
|
||||||
|
|
||||||
|
if existing_record:
|
||||||
|
# Check if the existing record has the same content
|
||||||
|
if existing_record['content'] == cloudflare_ip:
|
||||||
|
logger.info(f"Record for {full_name} already exists with the correct IP. No update needed.")
|
||||||
|
return {"success": True, "result": existing_record}
|
||||||
|
|
||||||
|
url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records/{existing_record['id']}"
|
||||||
|
response = requests.put(url, headers=headers, json=data)
|
||||||
|
else:
|
||||||
|
url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records"
|
||||||
|
response = requests.post(url, headers=headers, json=data)
|
||||||
|
|
||||||
|
result = response.json()
|
||||||
|
|
||||||
|
# Handle the specific error code
|
||||||
|
if not result.get('success') and result.get('errors'):
|
||||||
|
for error in result['errors']:
|
||||||
|
if error.get('code') == 81058: # "A record with the same settings already exists"
|
||||||
|
logger.info(f"Record for {full_name} already exists with the correct settings. No update needed.")
|
||||||
|
return {"success": True, "result": existing_record or data}
|
||||||
|
|
||||||
|
return result
|
||||||
|
|
||||||
|
def main():
|
||||||
|
if len(sys.argv) < 2:
|
||||||
|
usage()
|
||||||
|
|
||||||
|
if sys.argv[1] in ['ddns', 'all']:
|
||||||
|
force = '--force' in sys.argv
|
||||||
|
ddns(force)
|
||||||
|
if sys.argv[1] == 'ddns':
|
||||||
|
return
|
||||||
|
|
||||||
|
if os.geteuid() != 0 and sys.argv[1] not in ['ddns', 'all']:
|
||||||
|
logger.error("This script must be run as root for Caddyfile modifications. Try using 'sudo'.")
|
||||||
|
sys.exit(1)
|
||||||
|
|
||||||
|
full_domain = sys.argv[1]
|
||||||
|
caddy_ip = "localhost"
|
||||||
|
port = None
|
||||||
|
|
||||||
|
i = 2
|
||||||
|
while i < len(sys.argv):
|
||||||
|
if sys.argv[i] in ['--ip', '-i']:
|
||||||
|
caddy_ip = sys.argv[i+1]
|
||||||
|
i += 2
|
||||||
|
elif sys.argv[i] in ['--port', '-p']:
|
||||||
|
port = sys.argv[i+1]
|
||||||
|
i += 2
|
||||||
|
else:
|
||||||
|
usage()
|
||||||
|
|
||||||
|
if not port:
|
||||||
|
usage()
|
||||||
|
|
||||||
|
parts = full_domain.split('.')
|
||||||
|
if len(parts) == 2:
|
||||||
|
domain = full_domain
|
||||||
|
subdomain = "@"
|
||||||
|
else:
|
||||||
|
subdomain = parts[0]
|
||||||
|
domain = '.'.join(parts[1:])
|
||||||
|
|
||||||
|
with open(CF_DOMAINS_FILE, 'r') as file:
|
||||||
|
cf_domains = yaml.safe_load(file)
|
||||||
|
|
||||||
|
if domain not in cf_domains:
|
||||||
|
logger.error(f"Domain {domain} not found in cf_domains.yaml")
|
||||||
|
sys.exit(1)
|
||||||
|
|
||||||
|
zone_id = cf_domains[domain].get('_id')
|
||||||
|
if not zone_id:
|
||||||
|
logger.error(f"Zone ID for {domain} could not be found.")
|
||||||
|
sys.exit(1)
|
||||||
|
|
||||||
|
cloudflare_ip = os.getenv('CURRENT_IP')
|
||||||
|
|
||||||
|
result = update_or_create_record(zone_id, subdomain, domain, cloudflare_ip)
|
||||||
|
|
||||||
|
if result.get('success'):
|
||||||
|
record_id = result['result'].get('id')
|
||||||
|
if record_id:
|
||||||
|
if subdomain == "@":
|
||||||
|
cf_domains[domain]["@"] = record_id
|
||||||
|
else:
|
||||||
|
cf_domains[domain][subdomain] = record_id
|
||||||
|
with open(CF_DOMAINS_FILE, 'w') as file:
|
||||||
|
yaml.dump(cf_domains, file)
|
||||||
|
logger.info(f"A record for {full_domain} created/updated and cf_domains.yaml updated successfully.")
|
||||||
|
else:
|
||||||
|
logger.info(f"A record for {full_domain} already exists with correct settings. No update needed.")
|
||||||
|
sort_yaml()
|
||||||
|
logger.info("YAML file sorted after update.")
|
||||||
|
update_caddyfile(full_domain, caddy_ip, port)
|
||||||
|
else:
|
||||||
|
error_message = result.get('errors', [{'message': 'Unknown error', 'code': 'N/A'}])[0]
|
||||||
|
logger.error(f"Failed to create/update A record for {full_domain}. Error: {error_message.get('message')} (Code: {error_message.get('code')})")
|
||||||
|
|
||||||
|
sort_yaml()
|
||||||
|
logger.info("YAML file sorted at end.")
|
||||||
|
|
||||||
|
logger.info("Restarting caddy!")
|
||||||
|
subprocess.run(['sudo', 'systemctl', 'restart', 'caddy'], check=True)
|
||||||
|
|
||||||
|
if __name__ == "__main__":
|
||||||
|
main()
|
||||||
Loading…
Reference in a new issue