David Kerr
8 years ago
8 changed files with 536 additions and 43 deletions
-
17README.md
-
17acme.sh
-
5deploy/README.md
-
50deploy/kong.sh
-
41dnsapi/README.md
-
215dnsapi/dns_dnsimple.sh
-
216dnsapi/dns_dynu.sh
-
4dnsapi/dns_ovh.sh
@ -0,0 +1,215 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# DNSimple domain api |
||||
|
# https://github.com/pho3nixf1re/acme.sh/issues |
||||
|
# |
||||
|
# This is your oauth token which can be acquired on the account page. Please |
||||
|
# note that this must be an _account_ token and not a _user_ token. |
||||
|
# https://dnsimple.com/a/<your account id>/account/access_tokens |
||||
|
# DNSimple_OAUTH_TOKEN="sdfsdfsdfljlbjkljlkjsdfoiwje" |
||||
|
|
||||
|
DNSimple_API="https://api.dnsimple.com/v2" |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
# Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_dnsimple_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
if [ -z "$DNSimple_OAUTH_TOKEN" ]; then |
||||
|
DNSimple_OAUTH_TOKEN="" |
||||
|
_err "You have not set the dnsimple oauth token yet." |
||||
|
_err "Please visit https://dnsimple.com/user to generate it." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# save the oauth token for later |
||||
|
_saveaccountconf DNSimple_OAUTH_TOKEN "$DNSimple_OAUTH_TOKEN" |
||||
|
|
||||
|
if ! _get_account_id; then |
||||
|
_err "failed to retrive account id" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_get_records "$_account_id" "$_domain" "$_sub_domain" |
||||
|
|
||||
|
if [ "$_records_count" = "0" ]; then |
||||
|
_info "Adding record" |
||||
|
if _dnsimple_rest POST "$_account_id/zones/$_domain/records" "{\"type\":\"TXT\",\"name\":\"$_sub_domain\",\"content\":\"$txtvalue\",\"ttl\":120}"; then |
||||
|
if printf -- "%s" "$response" | grep "\"name\":\"$_sub_domain\"" >/dev/null; then |
||||
|
_info "Added" |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Unexpected response while adding text record." |
||||
|
return 1 |
||||
|
fi |
||||
|
fi |
||||
|
_err "Add txt record error." |
||||
|
else |
||||
|
_info "Updating record" |
||||
|
_extract_record_id "$_records" "$_sub_domain" |
||||
|
|
||||
|
if _dnsimple_rest \ |
||||
|
PATCH \ |
||||
|
"$_account_id/zones/$_domain/records/$_record_id" \ |
||||
|
"{\"type\":\"TXT\",\"name\":\"$_sub_domain\",\"content\":\"$txtvalue\",\"ttl\":120}"; then |
||||
|
|
||||
|
_info "Updated!" |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
_err "Update error" |
||||
|
return 1 |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
# fulldomain |
||||
|
dns_dnsimple_rm() { |
||||
|
fulldomain=$1 |
||||
|
|
||||
|
if ! _get_account_id; then |
||||
|
_err "failed to retrive account id" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_get_records "$_account_id" "$_domain" "$_sub_domain" |
||||
|
_extract_record_id "$_records" "$_sub_domain" |
||||
|
|
||||
|
if [ "$_record_id" ]; then |
||||
|
|
||||
|
if _dnsimple_rest DELETE "$_account_id/zones/$_domain/records/$_record_id"; then |
||||
|
_info "removed record" "$_record_id" |
||||
|
return 0 |
||||
|
fi |
||||
|
fi |
||||
|
|
||||
|
_err "failed to remove record" "$_record_id" |
||||
|
return 1 |
||||
|
|
||||
|
} |
||||
|
|
||||
|
#################### Private functions bellow ################################## |
||||
|
# _acme-challenge.www.domain.com |
||||
|
# returns |
||||
|
# _sub_domain=_acme-challenge.www |
||||
|
# _domain=domain.com |
||||
|
_get_root() { |
||||
|
domain=$1 |
||||
|
i=2 |
||||
|
previous=1 |
||||
|
while true; do |
||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
||||
|
if [ -z "$h" ]; then |
||||
|
# not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if ! _dnsimple_rest GET "$_account_id/zones/$h"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if _contains "$response" 'not found'; then |
||||
|
_debug "$h not found" |
||||
|
else |
||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$previous) |
||||
|
_domain="$h" |
||||
|
|
||||
|
_debug _domain "$_domain" |
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
|
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
previous="$i" |
||||
|
i=$(_math "$i" + 1) |
||||
|
done |
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
# returns _account_id |
||||
|
_get_account_id() { |
||||
|
_debug "retrive account id" |
||||
|
if ! _dnsimple_rest GET "whoami"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if _contains "$response" "\"account\":null"; then |
||||
|
_err "no account associated with this token" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if _contains "$response" "timeout"; then |
||||
|
_err "timeout retrieving account id" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_account_id=$(printf "%s" "$response" | _egrep_o "\"id\":[^,]*,\"email\":" | cut -d: -f2 | cut -d, -f1) |
||||
|
_debug _account_id "$_account_id" |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
# returns |
||||
|
# _records |
||||
|
# _records_count |
||||
|
_get_records() { |
||||
|
account_id=$1 |
||||
|
domain=$2 |
||||
|
sub_domain=$3 |
||||
|
|
||||
|
_debug "fetching txt records" |
||||
|
_dnsimple_rest GET "$account_id/zones/$domain/records?per_page=100" |
||||
|
|
||||
|
if ! _contains "$response" "\"id\":"; then |
||||
|
_err "failed to retrieve records" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_records_count=$(printf "%s" "$response" | _egrep_o "\"name\":\"$sub_domain\"" | wc -l | _egrep_o "[0-9]+") |
||||
|
_records=$response |
||||
|
_debug _records_count "$_records_count" |
||||
|
} |
||||
|
|
||||
|
# returns _record_id |
||||
|
_extract_record_id() { |
||||
|
_record_id=$(printf "%s" "$_records" | _egrep_o "\"id\":[^,]*,\"zone_id\":\"[^,]*\",\"parent_id\":null,\"name\":\"$_sub_domain\"" | cut -d: -f2 | cut -d, -f1) |
||||
|
_debug "_record_id" "$_record_id" |
||||
|
} |
||||
|
|
||||
|
# returns response |
||||
|
_dnsimple_rest() { |
||||
|
method=$1 |
||||
|
path="$2" |
||||
|
data="$3" |
||||
|
request_url="$DNSimple_API/$path" |
||||
|
_debug "$path" |
||||
|
|
||||
|
export _H1="Accept: application/json" |
||||
|
export _H2="Authorization: Bearer $DNSimple_OAUTH_TOKEN" |
||||
|
|
||||
|
if [ "$data" ] || [ "$method" = "DELETE" ]; then |
||||
|
_H1="Content-Type: application/json" |
||||
|
_debug data "$data" |
||||
|
response="$(_post "$data" "$request_url" "" "$method")" |
||||
|
else |
||||
|
response="$(_get "$request_url" "" "" "$method")" |
||||
|
fi |
||||
|
|
||||
|
if [ "$?" != "0" ]; then |
||||
|
_err "error $request_url" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug2 response "$response" |
||||
|
return 0 |
||||
|
} |
||||
@ -0,0 +1,216 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
#Client ID |
||||
|
#Dynu_ClientId="0b71cae7-a099-4f6b-8ddf-94571cdb760d" |
||||
|
# |
||||
|
#Secret |
||||
|
#Dynu_Secret="aCUEY4BDCV45KI8CSIC3sp2LKQ9" |
||||
|
# |
||||
|
#Token |
||||
|
Dynu_Token="" |
||||
|
# |
||||
|
#Endpoint |
||||
|
Dynu_EndPoint="https://api.dynu.com/v1" |
||||
|
# |
||||
|
#Author: Dynu Systems, Inc. |
||||
|
#Report Bugs here: https://github.com/shar0119/acme.sh |
||||
|
# |
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_dynu_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
if [ -z "$Dynu_ClientId" ] || [ -z "$Dynu_Secret" ]; then |
||||
|
Dynu_ClientId="" |
||||
|
Dynu_Secret="" |
||||
|
_err "Dynu client id and secret is not specified." |
||||
|
_err "Please create you API client id and secret and try again." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
#save the client id and secret to the account conf file. |
||||
|
_saveaccountconf Dynu_ClientId "$Dynu_ClientId" |
||||
|
_saveaccountconf Dynu_Secret "$Dynu_Secret" |
||||
|
|
||||
|
if [ -z "$Dynu_Token" ]; then |
||||
|
_info "Getting Dynu token." |
||||
|
if ! _dynu_authentication; then |
||||
|
_err "Can not get token." |
||||
|
fi |
||||
|
fi |
||||
|
|
||||
|
_debug "Detect root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "Invalid domain." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _node "$_node" |
||||
|
_debug _domain_name "$_domain_name" |
||||
|
|
||||
|
_info "Creating TXT record." |
||||
|
if ! _dynu_rest POST "dns/record/add" "{\"domain_name\":\"$_domain_name\",\"node_name\":\"$_node\",\"record_type\":\"TXT\",\"text_data\":\"$txtvalue\",\"state\":true,\"ttl\":90}"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if ! _contains "$response" "text_data"; then |
||||
|
_err "Could not add TXT record." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#Usage: rm _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_dynu_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
if [ -z "$Dynu_ClientId" ] || [ -z "$Dynu_Secret" ]; then |
||||
|
Dynu_ClientId="" |
||||
|
Dynu_Secret="" |
||||
|
_err "Dynu client id and secret is not specified." |
||||
|
_err "Please create you API client id and secret and try again." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
#save the client id and secret to the account conf file. |
||||
|
_saveaccountconf Dynu_ClientId "$Dynu_ClientId" |
||||
|
_saveaccountconf Dynu_Secret "$Dynu_Secret" |
||||
|
|
||||
|
if [ -z "$Dynu_Token" ]; then |
||||
|
_info "Getting Dynu token." |
||||
|
if ! _dynu_authentication; then |
||||
|
_err "Can not get token." |
||||
|
fi |
||||
|
fi |
||||
|
|
||||
|
_debug "Detect root zone." |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "Invalid domain." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _node "$_node" |
||||
|
_debug _domain_name "$_domain_name" |
||||
|
|
||||
|
_info "Checking for TXT record." |
||||
|
if ! _get_recordid "$fulldomain" "$txtvalue"; then |
||||
|
_err "Could not get TXT record id." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if [ "$_dns_record_id" = "" ]; then |
||||
|
_err "TXT record not found." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Removing TXT record." |
||||
|
if ! _delete_txt_record "$_dns_record_id"; then |
||||
|
_err "Could not remove TXT record $_dns_record_id." |
||||
|
fi |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
######## Private functions below ################################## |
||||
|
#_acme-challenge.www.domain.com |
||||
|
#returns |
||||
|
# _node=_acme-challenge.www |
||||
|
# _domain_name=domain.com |
||||
|
_get_root() { |
||||
|
domain=$1 |
||||
|
if ! _dynu_rest GET "dns/getroot/$domain"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if ! _contains "$response" "domain_name"; then |
||||
|
_debug "Domain name not found." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_domain_name=$(printf "%s" "$response" | tr -d "{}" | cut -d , -f 1 | cut -d : -f 2 | cut -d '"' -f 2) |
||||
|
_node=$(printf "%s" "$response" | tr -d "{}" | cut -d , -f 3 | cut -d : -f 2 | cut -d '"' -f 2) |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_get_recordid() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
if ! _dynu_rest GET "dns/record/get?hostname=$fulldomain&rrtype=TXT"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if ! _contains "$response" "$txtvalue"; then |
||||
|
_dns_record_id=0 |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
_dns_record_id=$(printf "%s" "$response" | _egrep_o "{[^}]*}" | grep "\"text_data\":\"$txtvalue\"" | _egrep_o ",[^,]*," | grep ',"id":' | tr -d ",," | cut -d : -f 2) |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_delete_txt_record() { |
||||
|
_dns_record_id=$1 |
||||
|
|
||||
|
if ! _dynu_rest GET "dns/record/delete/$_dns_record_id"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if ! _contains "$response" "true"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_dynu_rest() { |
||||
|
m=$1 |
||||
|
ep="$2" |
||||
|
data="$3" |
||||
|
_debug "$ep" |
||||
|
|
||||
|
export _H1="Authorization: Bearer $Dynu_Token" |
||||
|
export _H2="Content-Type: application/json" |
||||
|
|
||||
|
if [ "$data" ]; then |
||||
|
_debug data "$data" |
||||
|
response="$(_post "$data" "$Dynu_EndPoint/$ep" "" "$m")" |
||||
|
else |
||||
|
_info "Getting $Dynu_EndPoint/$ep" |
||||
|
response="$(_get "$Dynu_EndPoint/$ep")" |
||||
|
fi |
||||
|
|
||||
|
if [ "$?" != "0" ]; then |
||||
|
_err "error $ep" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug2 response "$response" |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_dynu_authentication() { |
||||
|
realm="$(printf "%s" "$Dynu_ClientId:$Dynu_Secret" | _base64)" |
||||
|
|
||||
|
export _H1="Authorization: Basic $realm" |
||||
|
export _H2="Content-Type: application/json" |
||||
|
|
||||
|
response="$(_get "$Dynu_EndPoint/oauth2/token")" |
||||
|
if [ "$?" != "0" ]; then |
||||
|
_err "Authentication failed." |
||||
|
return 1 |
||||
|
fi |
||||
|
if _contains "$response" "accessToken"; then |
||||
|
Dynu_Token=$(printf "%s" "$response" | tr -d "[]" | cut -d , -f 2 | cut -d : -f 2 | cut -d '"' -f 2) |
||||
|
fi |
||||
|
if _contains "$Dynu_Token" "null"; then |
||||
|
Dynu_Token="" |
||||
|
fi |
||||
|
|
||||
|
_debug2 response "$response" |
||||
|
return 0 |
||||
|
} |
||||
Write
Preview
Loading…
Cancel
Save
Reference in new issue