Владимир Алексеев
3 weeks ago
committed by
GitHub
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
125 changed files with 2629 additions and 888 deletions
-
3.github/workflows/DNS.yml
-
2.github/workflows/Linux.yml
-
2.github/workflows/PebbleStrict.yml
-
15.github/workflows/dockerhub.yml
-
2.github/workflows/pr_notify.yml
-
759acme.sh
-
88deploy/ali_cdn.sh
-
88deploy/ali_dcdn.sh
-
1deploy/exim4.sh
-
7deploy/routeros.sh
-
49deploy/synology_dsm.sh
-
64deploy/unifi.sh
-
8deploy/vault.sh
-
2deploy/vsftpd.sh
-
5dnsapi/dns_1984hosting.sh
-
6dnsapi/dns_active24.sh
-
4dnsapi/dns_ad.sh
-
139dnsapi/dns_ali.sh
-
184dnsapi/dns_alviy.sh
-
7dnsapi/dns_anx.sh
-
4dnsapi/dns_arvan.sh
-
4dnsapi/dns_aurora.sh
-
4dnsapi/dns_autodns.sh
-
4dnsapi/dns_aws.sh
-
4dnsapi/dns_azion.sh
-
29dnsapi/dns_azure.sh
-
8dnsapi/dns_bunny.sh
-
4dnsapi/dns_cf.sh
-
2dnsapi/dns_cloudns.sh
-
4dnsapi/dns_cn.sh
-
4dnsapi/dns_conoha.sh
-
4dnsapi/dns_constellix.sh
-
2dnsapi/dns_curanet.sh
-
4dnsapi/dns_da.sh
-
4dnsapi/dns_desec.sh
-
6dnsapi/dns_dgon.sh
-
2dnsapi/dns_dnsexit.sh
-
4dnsapi/dns_dnsimple.sh
-
3dnsapi/dns_doapi.sh
-
4dnsapi/dns_domeneshop.sh
-
4dnsapi/dns_dp.sh
-
4dnsapi/dns_dpi.sh
-
4dnsapi/dns_durabledns.sh
-
4dnsapi/dns_dynu.sh
-
13dnsapi/dns_dynv6.sh
-
4dnsapi/dns_easydns.sh
-
4dnsapi/dns_euserv.sh
-
4dnsapi/dns_exoscale.sh
-
2dnsapi/dns_fornex.sh
-
4dnsapi/dns_gandi_livedns.sh
-
6dnsapi/dns_gcore.sh
-
4dnsapi/dns_gd.sh
-
2dnsapi/dns_geoscaling.sh
-
2dnsapi/dns_googledomains.sh
-
2dnsapi/dns_he.sh
-
4dnsapi/dns_hetzner.sh
-
4dnsapi/dns_hexonet.sh
-
4dnsapi/dns_huaweicloud.sh
-
4dnsapi/dns_internetbs.sh
-
17dnsapi/dns_inwx.sh
-
4dnsapi/dns_ionos.sh
-
145dnsapi/dns_ionos_cloud.sh
-
2dnsapi/dns_ispconfig.sh
-
4dnsapi/dns_jd.sh
-
2dnsapi/dns_joker.sh
-
4dnsapi/dns_kappernet.sh
-
4dnsapi/dns_la.sh
-
4dnsapi/dns_limacity.sh
-
4dnsapi/dns_linode.sh
-
4dnsapi/dns_linode_v4.sh
-
4dnsapi/dns_loopia.sh
-
4dnsapi/dns_lua.sh
-
2dnsapi/dns_maradns.sh
-
4dnsapi/dns_me.sh
-
10dnsapi/dns_miab.sh
-
4dnsapi/dns_misaka.sh
-
4dnsapi/dns_mydnsjp.sh
-
4dnsapi/dns_mythic_beasts.sh
-
12dnsapi/dns_namecheap.sh
-
6dnsapi/dns_namecom.sh
-
6dnsapi/dns_namesilo.sh
-
4dnsapi/dns_nederhost.sh
-
4dnsapi/dns_neodigit.sh
-
7dnsapi/dns_netlify.sh
-
2dnsapi/dns_nic.sh
-
4dnsapi/dns_njalla.sh
-
4dnsapi/dns_nsone.sh
-
16dnsapi/dns_nsupdate.sh
-
4dnsapi/dns_nw.sh
-
4dnsapi/dns_oci.sh
-
395dnsapi/dns_omglol.sh
-
4dnsapi/dns_one.sh
-
4dnsapi/dns_online.sh
-
6dnsapi/dns_openprovider.sh
-
6dnsapi/dns_opnsense.sh
-
6dnsapi/dns_ovh.sh
-
4dnsapi/dns_pdns.sh
-
4dnsapi/dns_pointhq.sh
-
8dnsapi/dns_porkbun.sh
-
4dnsapi/dns_rackcorp.sh
759
acme.sh
File diff suppressed because it is too large
View File
File diff suppressed because it is too large
View File
@ -0,0 +1,88 @@ |
|||
#!/usr/bin/env sh |
|||
# shellcheck disable=SC2034,SC2154 |
|||
|
|||
# Script to create certificate to Alibaba Cloud CDN |
|||
# |
|||
# Docs: https://github.com/acmesh-official/acme.sh/wiki/deployhooks#33-deploy-your-certificate-to-cdn-or-dcdn-of-alibaba-cloud-aliyun |
|||
# |
|||
# This deployment required following variables |
|||
# export Ali_Key="ALIACCESSKEY" |
|||
# export Ali_Secret="ALISECRETKEY" |
|||
# The credentials are shared with all the Alibaba Cloud deploy hooks and dnsapi |
|||
# |
|||
# To specify the CDN domain that is different from the certificate CN, usually used for multi-domain or wildcard certificates |
|||
# export DEPLOY_ALI_CDN_DOMAIN="cdn.example.com" |
|||
# If you have multiple CDN domains using the same certificate, just |
|||
# export DEPLOY_ALI_CDN_DOMAIN="cdn1.example.com cdn2.example.com" |
|||
# |
|||
# For DCDN, see ali_dcdn deploy hook |
|||
|
|||
Ali_CDN_API="https://cdn.aliyuncs.com/" |
|||
|
|||
ali_cdn_deploy() { |
|||
_cdomain="$1" |
|||
_ckey="$2" |
|||
_ccert="$3" |
|||
_cca="$4" |
|||
_cfullchain="$5" |
|||
|
|||
_debug _cdomain "$_cdomain" |
|||
_debug _ckey "$_ckey" |
|||
_debug _ccert "$_ccert" |
|||
_debug _cca "$_cca" |
|||
_debug _cfullchain "$_cfullchain" |
|||
|
|||
# Load dnsapi/dns_ali.sh to reduce the duplicated codes |
|||
# https://github.com/acmesh-official/acme.sh/pull/5205#issuecomment-2357867276 |
|||
dnsapi_ali="$(_findHook "$_cdomain" "$_SUB_FOLDER_DNSAPI" dns_ali)" |
|||
# shellcheck source=/dev/null |
|||
if ! . "$dnsapi_ali"; then |
|||
_err "Error loading file $dnsapi_ali. Please check your API file and try again." |
|||
return 1 |
|||
fi |
|||
|
|||
_prepare_ali_credentials || return 1 |
|||
|
|||
_getdeployconf DEPLOY_ALI_CDN_DOMAIN |
|||
if [ "$DEPLOY_ALI_CDN_DOMAIN" ]; then |
|||
_savedeployconf DEPLOY_ALI_CDN_DOMAIN "$DEPLOY_ALI_CDN_DOMAIN" |
|||
else |
|||
DEPLOY_ALI_CDN_DOMAIN="$_cdomain" |
|||
fi |
|||
|
|||
# read cert and key files and urlencode both |
|||
_cert=$(_url_encode upper-hex <"$_cfullchain") |
|||
_key=$(_url_encode upper-hex <"$_ckey") |
|||
|
|||
_debug2 _cert "$_cert" |
|||
_debug2 _key "$_key" |
|||
|
|||
## update domain ssl config |
|||
for domain in $DEPLOY_ALI_CDN_DOMAIN; do |
|||
_set_cdn_domain_ssl_certificate_query "$domain" "$_cert" "$_key" |
|||
if _ali_rest "Set CDN domain SSL certificate for $domain" "" POST; then |
|||
_info "Domain $domain certificate has been deployed successfully" |
|||
fi |
|||
done |
|||
|
|||
return 0 |
|||
} |
|||
|
|||
# domain pub pri |
|||
_set_cdn_domain_ssl_certificate_query() { |
|||
endpoint=$Ali_CDN_API |
|||
query='' |
|||
query=$query'AccessKeyId='$Ali_Key |
|||
query=$query'&Action=SetCdnDomainSSLCertificate' |
|||
query=$query'&CertType=upload' |
|||
query=$query'&DomainName='$1 |
|||
query=$query'&Format=json' |
|||
query=$query'&SSLPri='$3 |
|||
query=$query'&SSLProtocol=on' |
|||
query=$query'&SSLPub='$2 |
|||
query=$query'&SignatureMethod=HMAC-SHA1' |
|||
query=$query"&SignatureNonce=$(_ali_nonce)" |
|||
query=$query'&SignatureVersion=1.0' |
|||
query=$query'&Timestamp='$(_timestamp) |
|||
query=$query'&Version=2018-05-10' |
|||
} |
|||
@ -0,0 +1,88 @@ |
|||
#!/usr/bin/env sh |
|||
# shellcheck disable=SC2034,SC2154 |
|||
|
|||
# Script to create certificate to Alibaba Cloud DCDN |
|||
# |
|||
# Docs: https://github.com/acmesh-official/acme.sh/wiki/deployhooks#33-deploy-your-certificate-to-cdn-or-dcdn-of-alibaba-cloud-aliyun |
|||
# |
|||
# This deployment required following variables |
|||
# export Ali_Key="ALIACCESSKEY" |
|||
# export Ali_Secret="ALISECRETKEY" |
|||
# The credentials are shared with all the Alibaba Cloud deploy hooks and dnsapi |
|||
# |
|||
# To specify the DCDN domain that is different from the certificate CN, usually used for multi-domain or wildcard certificates |
|||
# export DEPLOY_ALI_DCDN_DOMAIN="dcdn.example.com" |
|||
# If you have multiple CDN domains using the same certificate, just |
|||
# export DEPLOY_ALI_DCDN_DOMAIN="dcdn1.example.com dcdn2.example.com" |
|||
# |
|||
# For regular CDN, see ali_cdn deploy hook |
|||
|
|||
Ali_DCDN_API="https://dcdn.aliyuncs.com/" |
|||
|
|||
ali_dcdn_deploy() { |
|||
_cdomain="$1" |
|||
_ckey="$2" |
|||
_ccert="$3" |
|||
_cca="$4" |
|||
_cfullchain="$5" |
|||
|
|||
_debug _cdomain "$_cdomain" |
|||
_debug _ckey "$_ckey" |
|||
_debug _ccert "$_ccert" |
|||
_debug _cca "$_cca" |
|||
_debug _cfullchain "$_cfullchain" |
|||
|
|||
# Load dnsapi/dns_ali.sh to reduce the duplicated codes |
|||
# https://github.com/acmesh-official/acme.sh/pull/5205#issuecomment-2357867276 |
|||
dnsapi_ali="$(_findHook "$_cdomain" "$_SUB_FOLDER_DNSAPI" dns_ali)" |
|||
# shellcheck source=/dev/null |
|||
if ! . "$dnsapi_ali"; then |
|||
_err "Error loading file $dnsapi_ali. Please check your API file and try again." |
|||
return 1 |
|||
fi |
|||
|
|||
_prepare_ali_credentials || return 1 |
|||
|
|||
_getdeployconf DEPLOY_ALI_DCDN_DOMAIN |
|||
if [ "$DEPLOY_ALI_DCDN_DOMAIN" ]; then |
|||
_savedeployconf DEPLOY_ALI_DCDN_DOMAIN "$DEPLOY_ALI_DCDN_DOMAIN" |
|||
else |
|||
DEPLOY_ALI_DCDN_DOMAIN="$_cdomain" |
|||
fi |
|||
|
|||
# read cert and key files and urlencode both |
|||
_cert=$(_url_encode upper-hex <"$_cfullchain") |
|||
_key=$(_url_encode upper-hex <"$_ckey") |
|||
|
|||
_debug2 _cert "$_cert" |
|||
_debug2 _key "$_key" |
|||
|
|||
## update domain ssl config |
|||
for domain in $DEPLOY_ALI_DCDN_DOMAIN; do |
|||
_set_dcdn_domain_ssl_certificate_query "$domain" "$_cert" "$_key" |
|||
if _ali_rest "Set DCDN domain SSL certificate for $domain" "" POST; then |
|||
_info "Domain $domain certificate has been deployed successfully" |
|||
fi |
|||
done |
|||
|
|||
return 0 |
|||
} |
|||
|
|||
# domain pub pri |
|||
_set_dcdn_domain_ssl_certificate_query() { |
|||
endpoint=$Ali_DCDN_API |
|||
query='' |
|||
query=$query'AccessKeyId='$Ali_Key |
|||
query=$query'&Action=SetDcdnDomainSSLCertificate' |
|||
query=$query'&CertType=upload' |
|||
query=$query'&DomainName='$1 |
|||
query=$query'&Format=json' |
|||
query=$query'&SSLPri='$3 |
|||
query=$query'&SSLProtocol=on' |
|||
query=$query'&SSLPub='$2 |
|||
query=$query'&SignatureMethod=HMAC-SHA1' |
|||
query=$query"&SignatureNonce=$(_ali_nonce)" |
|||
query=$query'&SignatureVersion=1.0' |
|||
query=$query'&Timestamp='$(_timestamp) |
|||
query=$query'&Version=2018-01-15' |
|||
} |
|||
@ -0,0 +1,184 @@ |
|||
#!/usr/bin/env sh |
|||
# Alviy domain api |
|||
# |
|||
# Get API key and secret from https://cloud.alviy.com/token |
|||
# |
|||
# Alviy_token="some-secret-key" |
|||
# |
|||
# Ex.: acme.sh --issue --staging --dns dns_alviy -d "*.s.example.com" -d "s.example.com" |
|||
|
|||
Alviy_Api="https://cloud.alviy.com/api/v1" |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
#Usage: dns_alviy_add _acme-challenge.www.domain.com "content" |
|||
dns_alviy_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
Alviy_token="${Alviy_token:-$(_readaccountconf_mutable Alviy_token)}" |
|||
if [ -z "$Alviy_token" ]; then |
|||
Alviy_token="" |
|||
_err "Please specify Alviy token." |
|||
return 1 |
|||
fi |
|||
|
|||
#save the api key and email to the account conf file. |
|||
_saveaccountconf_mutable Alviy_token "$Alviy_token" |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain"; then |
|||
_err "invalid domain" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug _sub_domain "$_sub_domain" |
|||
_debug _domain "$_domain" |
|||
|
|||
_debug "Getting existing records" |
|||
if _alviy_txt_exists "$_domain" "$fulldomain" "$txtvalue"; then |
|||
_info "This record already exists, skipping" |
|||
return 0 |
|||
fi |
|||
|
|||
_add_data="{\"content\":\"$txtvalue\",\"type\":\"TXT\"}" |
|||
_debug2 _add_data "$_add_data" |
|||
_info "Adding record" |
|||
if _alviy_rest POST "zone/$_domain/domain/$fulldomain/" "$_add_data"; then |
|||
_debug "Checking updated records of '${fulldomain}'" |
|||
|
|||
if ! _alviy_txt_exists "$_domain" "$fulldomain" "$txtvalue"; then |
|||
_err "TXT record '${txtvalue}' for '${fulldomain}', value wasn't set!" |
|||
return 1 |
|||
fi |
|||
|
|||
else |
|||
_err "Add txt record error, value '${txtvalue}' for '${fulldomain}' was not set." |
|||
return 1 |
|||
fi |
|||
|
|||
_sleep 10 |
|||
_info "Added TXT record '${txtvalue}' for '${fulldomain}'." |
|||
return 0 |
|||
} |
|||
|
|||
#fulldomain |
|||
dns_alviy_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
Alviy_token="${Alviy_token:-$(_readaccountconf_mutable Alviy_token)}" |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain"; then |
|||
_err "invalid domain" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug _sub_domain "$_sub_domain" |
|||
_debug _domain "$_domain" |
|||
|
|||
if ! _alviy_txt_exists "$_domain" "$fulldomain" "$txtvalue"; then |
|||
_info "The record does not exist, skip" |
|||
return 0 |
|||
fi |
|||
|
|||
_add_data="" |
|||
uuid=$(echo "$response" | tr "{" "\n" | grep "$txtvalue" | tr "," "\n" | grep uuid | cut -d \" -f4) |
|||
# delete record |
|||
_debug "Delete TXT record for '${fulldomain}'" |
|||
if ! _alviy_rest DELETE "zone/$_domain/record/$uuid" "{\"confirm\":1}"; then |
|||
_err "Cannot delete empty TXT record for '$fulldomain'" |
|||
return 1 |
|||
fi |
|||
_info "The record '$fulldomain'='$txtvalue' deleted" |
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
#_acme-challenge.www.domain.com |
|||
#returns |
|||
# _sub_domain=_acme-challenge.www |
|||
# _domain=domain.com |
|||
_get_root() { |
|||
domain=$1 |
|||
i=3 |
|||
a="init" |
|||
while [ -n "$a" ]; do |
|||
a=$(printf "%s" "$domain" | cut -d . -f $i-) |
|||
i=$((i + 1)) |
|||
done |
|||
n=$((i - 3)) |
|||
h=$(printf "%s" "$domain" | cut -d . -f $n-) |
|||
if [ -z "$h" ]; then |
|||
#not valid |
|||
_alviy_rest GET "zone/$domain/" |
|||
_debug "can't get host from $domain" |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _alviy_rest GET "zone/$h/"; then |
|||
return 1 |
|||
fi |
|||
|
|||
if _contains "$response" '"code":"NOT_FOUND"'; then |
|||
_debug "$h not found" |
|||
else |
|||
s=$((n - 1)) |
|||
_sub_domain=$(printf "%s" "$domain" | cut -d . -f -$s) |
|||
_domain="$h" |
|||
return 0 |
|||
fi |
|||
return 1 |
|||
} |
|||
|
|||
_alviy_txt_exists() { |
|||
zone=$1 |
|||
domain=$2 |
|||
content_data=$3 |
|||
_debug "Getting existing records" |
|||
|
|||
if ! _alviy_rest GET "zone/$zone/domain/$domain/TXT/"; then |
|||
_info "The record does not exist" |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _contains "$response" "$3"; then |
|||
_info "The record has other value" |
|||
return 1 |
|||
fi |
|||
# GOOD code return - TRUE function |
|||
return 0 |
|||
} |
|||
|
|||
_alviy_rest() { |
|||
method=$1 |
|||
path="$2" |
|||
content_data="$3" |
|||
_debug "$path" |
|||
|
|||
export _H1="Authorization: Bearer $Alviy_token" |
|||
export _H2="Content-Type: application/json" |
|||
|
|||
if [ "$content_data" ] || [ "$method" = "DELETE" ]; then |
|||
_debug "data ($method): " "$content_data" |
|||
response="$(_post "$content_data" "$Alviy_Api/$path" "" "$method")" |
|||
else |
|||
response="$(_get "$Alviy_Api/$path")" |
|||
fi |
|||
_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\\r\\n")" |
|||
if [ "$_code" = "401" ]; then |
|||
_err "It seems that your api key or secret is not correct." |
|||
return 1 |
|||
fi |
|||
|
|||
if [ "$_code" != "200" ]; then |
|||
_err "API call error ($method): $path Response code $_code" |
|||
fi |
|||
if [ "$?" != "0" ]; then |
|||
_err "error on rest call ($method): $path. Response:" |
|||
_err "$response" |
|||
return 1 |
|||
fi |
|||
_debug2 response "$response" |
|||
return 0 |
|||
} |
|||
@ -0,0 +1,145 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Supports IONOS Cloud DNS API v1.15.4 |
|||
# |
|||
# Usage: |
|||
# Export IONOS_TOKEN before calling acme.sh: |
|||
# $ export IONOS_TOKEN="..." |
|||
# |
|||
# $ acme.sh --issue --dns dns_ionos_cloud ... |
|||
|
|||
IONOS_CLOUD_API="https://dns.de-fra.ionos.com" |
|||
IONOS_CLOUD_ROUTE_ZONES="/zones" |
|||
|
|||
dns_ionos_cloud_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
if ! _ionos_init; then |
|||
return 1 |
|||
fi |
|||
|
|||
_record_name=$(printf "%s" "$fulldomain" | cut -d . -f 1) |
|||
_body="{\"properties\":{\"name\":\"$_record_name\", \"type\":\"TXT\", \"content\":\"$txtvalue\"}}" |
|||
|
|||
if _ionos_cloud_rest POST "$IONOS_CLOUD_ROUTE_ZONES/$_zone_id/records" "$_body" && [ "$_code" = "202" ]; then |
|||
_info "TXT record has been created successfully." |
|||
return 0 |
|||
fi |
|||
|
|||
return 1 |
|||
} |
|||
|
|||
dns_ionos_cloud_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
if ! _ionos_init; then |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _ionos_cloud_get_record "$_zone_id" "$txtvalue" "$fulldomain"; then |
|||
_err "Could not find _acme-challenge TXT record." |
|||
return 1 |
|||
fi |
|||
|
|||
if _ionos_cloud_rest DELETE "$IONOS_CLOUD_ROUTE_ZONES/$_zone_id/records/$_record_id" && [ "$_code" = "202" ]; then |
|||
_info "TXT record has been deleted successfully." |
|||
return 0 |
|||
fi |
|||
|
|||
return 1 |
|||
} |
|||
|
|||
_ionos_init() { |
|||
IONOS_TOKEN="${IONOS_TOKEN:-$(_readaccountconf_mutable IONOS_TOKEN)}" |
|||
|
|||
if [ -z "$IONOS_TOKEN" ]; then |
|||
_err "You didn't specify an IONOS token yet." |
|||
_err "Read https://api.ionos.com/docs/authentication/v1/#tag/tokens/operation/tokensGenerate to learn how to get a token." |
|||
_err "You need to set it before calling acme.sh:" |
|||
_err "\$ export IONOS_TOKEN=\"...\"" |
|||
_err "\$ acme.sh --issue -d ... --dns dns_ionos_cloud" |
|||
return 1 |
|||
fi |
|||
|
|||
_saveaccountconf_mutable IONOS_TOKEN "$IONOS_TOKEN" |
|||
|
|||
if ! _get_cloud_zone "$fulldomain"; then |
|||
_err "Cannot find zone $zone in your IONOS account." |
|||
return 1 |
|||
fi |
|||
|
|||
return 0 |
|||
} |
|||
|
|||
_get_cloud_zone() { |
|||
domain=$1 |
|||
zone=$(printf "%s" "$domain" | cut -d . -f 2-) |
|||
|
|||
if _ionos_cloud_rest GET "$IONOS_CLOUD_ROUTE_ZONES?filter.zoneName=$zone"; then |
|||
_response="$(echo "$_response" | tr -d "\n")" |
|||
|
|||
_zone_list_items=$(echo "$_response" | _egrep_o "\"items\":.*") |
|||
|
|||
_zone_id=$(printf "%s\n" "$_zone_list_items" | _egrep_o "\"id\":\"[a-fA-F0-9\-]*\"" | _head_n 1 | cut -d : -f 2 | tr -d '\"') |
|||
if [ "$_zone_id" ]; then |
|||
return 0 |
|||
fi |
|||
fi |
|||
|
|||
return 1 |
|||
} |
|||
|
|||
_ionos_cloud_get_record() { |
|||
zone_id=$1 |
|||
txtrecord=$2 |
|||
# this is to transform the domain to lower case |
|||
fulldomain=$(printf "%s" "$3" | _lower_case) |
|||
# this is to transform record name to lower case |
|||
# IONOS Cloud API transforms all record names to lower case |
|||
_record_name=$(printf "%s" "$fulldomain" | cut -d . -f 1 | _lower_case) |
|||
|
|||
if _ionos_cloud_rest GET "$IONOS_CLOUD_ROUTE_ZONES/$zone_id/records"; then |
|||
_response="$(echo "$_response" | tr -d "\n")" |
|||
|
|||
pattern="\{\"id\":\"[a-fA-F0-9\-]*\",\"type\":\"record\",\"href\":\"/zones/$zone_id/records/[a-fA-F0-9\-]*\",\"metadata\":\{\"createdDate\":\"[A-Z0-9\:\.\-]*\",\"lastModifiedDate\":\"[A-Z0-9\:\.\-]*\",\"fqdn\":\"$fulldomain\",\"state\":\"AVAILABLE\",\"zoneId\":\"$zone_id\"\},\"properties\":\{\"content\":\"$txtrecord\",\"enabled\":true,\"name\":\"$_record_name\",\"priority\":[0-9]*,\"ttl\":[0-9]*,\"type\":\"TXT\"\}\}" |
|||
|
|||
_record="$(echo "$_response" | _egrep_o "$pattern")" |
|||
if [ "$_record" ]; then |
|||
_record_id=$(printf "%s\n" "$_record" | _egrep_o "\"id\":\"[a-fA-F0-9\-]*\"" | _head_n 1 | cut -d : -f 2 | tr -d '\"') |
|||
return 0 |
|||
fi |
|||
fi |
|||
|
|||
return 1 |
|||
} |
|||
|
|||
_ionos_cloud_rest() { |
|||
method="$1" |
|||
route="$2" |
|||
data="$3" |
|||
|
|||
export _H1="Authorization: Bearer $IONOS_TOKEN" |
|||
|
|||
# clear headers |
|||
: >"$HTTP_HEADER" |
|||
|
|||
if [ "$method" != "GET" ]; then |
|||
_response="$(_post "$data" "$IONOS_CLOUD_API$route" "" "$method" "application/json")" |
|||
else |
|||
_response="$(_get "$IONOS_CLOUD_API$route")" |
|||
fi |
|||
|
|||
_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\\r\\n")" |
|||
|
|||
if [ "$?" != "0" ]; then |
|||
_err "Error $route: $_response" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug2 "_response" "$_response" |
|||
_debug2 "_code" "$_code" |
|||
|
|||
return 0 |
|||
} |
|||
@ -0,0 +1,395 @@ |
|||
#!/usr/bin/env sh |
|||
# shellcheck disable=SC2034 |
|||
dns_myapi_info='omg.lol |
|||
Based on the omg.lol API, defined at https://api.omg.lol/ |
|||
Domains: omg.lol |
|||
Site: github.com/acmesh-official/acme.sh/wiki/DNS-API-Dev-Guide |
|||
Docs: github.com/acmesh-official/acme.sh/wiki/dnsapi#dns_duckdns |
|||
Options: |
|||
OMG_ApiKey API Key from omg.lol. This is accesible from the bottom of the account page at https://home.omg.lol/account |
|||
OMG_Address This is your omg.lol address, without the preceding @ - you can see your list on your dashboard at https://home.omg.lol/dashboard |
|||
Issues: github.com/acmesh-official/acme.sh |
|||
Author: @Kholin <kholin+acme.omglolapi@omg.lol> |
|||
' |
|||
|
|||
#returns 0 means success, otherwise error. |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
# Please Read this guide first: https://github.com/acmesh-official/acme.sh/wiki/DNS-API-Dev-Guide |
|||
|
|||
#Usage: dns_myapi_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
dns_omglol_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
OMG_ApiKey="${OMG_ApiKey:-$(_readaccountconf_mutable OMG_ApiKey)}" |
|||
OMG_Address="${OMG_Address:-$(_readaccountconf_mutable OMG_Address)}" |
|||
|
|||
# As omg.lol includes a leading @ for their addresses, pre-strip this before save |
|||
OMG_Address="$(echo "$OMG_Address" | tr -d '@')" |
|||
|
|||
_saveaccountconf_mutable OMG_ApiKey "$OMG_ApiKey" |
|||
_saveaccountconf_mutable OMG_Address "$OMG_Address" |
|||
|
|||
_info "Using omg.lol." |
|||
_debug "Function" "dns_omglol_add()" |
|||
_debug "Full Domain Name" "$fulldomain" |
|||
_debug "txt Record Value" "$txtvalue" |
|||
_secure_debug "omg.lol API key" "$OMG_ApiKey" |
|||
_debug "omg.lol Address" "$OMG_Address" |
|||
|
|||
omg_validate "$OMG_ApiKey" "$OMG_Address" "$fulldomain" |
|||
if [ ! $? ]; then |
|||
return 1 |
|||
fi |
|||
|
|||
dnsName=$(_getDnsRecordName "$fulldomain" "$OMG_Address") |
|||
authHeader="$(_createAuthHeader "$OMG_ApiKey")" |
|||
|
|||
_debug2 "dns_omglol_add(): Address" "$dnsName" |
|||
|
|||
omg_add "$OMG_Address" "$authHeader" "$dnsName" "$txtvalue" |
|||
|
|||
} |
|||
|
|||
#Usage: fulldomain txtvalue |
|||
#Remove the txt record after validation. |
|||
dns_omglol_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
OMG_ApiKey="${OMG_ApiKey:-$(_readaccountconf_mutable OMG_ApiKey)}" |
|||
OMG_Address="${OMG_Address:-$(_readaccountconf_mutable OMG_Address)}" |
|||
|
|||
# As omg.lol includes a leading @ for their addresses, strip this in case provided |
|||
OMG_Address="$(echo "$OMG_Address" | tr -d '@')" |
|||
|
|||
_info "Using omg.lol" |
|||
_debug "Function" "dns_omglol_rm()" |
|||
_debug "Full Domain Name" "$fulldomain" |
|||
_debug "txt Record Value" "$txtvalue" |
|||
_secure_debug "omg.lol API key" "$OMG_ApiKey" |
|||
_debug "omg.lol Address" "$OMG_Address" |
|||
|
|||
omg_validate "$OMG_ApiKey" "$OMG_Address" "$fulldomain" |
|||
if [ ! $? ]; then |
|||
return 1 |
|||
fi |
|||
|
|||
dnsName=$(_getDnsRecordName "$fulldomain" "$OMG_Address") |
|||
authHeader="$(_createAuthHeader "$OMG_ApiKey")" |
|||
|
|||
omg_delete "$OMG_Address" "$authHeader" "$dnsName" "$txtvalue" |
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
# Check that the minimum requirements are present. Close ungracefully if not |
|||
omg_validate() { |
|||
omg_apikey=$1 |
|||
omg_address=$2 |
|||
fulldomain=$3 |
|||
|
|||
_debug2 "Function" "dns_validate()" |
|||
_secure_debug2 "omg.lol API key" "$omg_apikey" |
|||
_debug2 "omg.lol Address" "$omg_address" |
|||
_debug2 "Full Domain Name" "$fulldomain" |
|||
|
|||
if [ "" = "$omg_address" ]; then |
|||
_err "omg.lol base address not provided. Exiting" |
|||
return 1 |
|||
fi |
|||
|
|||
if [ "" = "$omg_apikey" ]; then |
|||
_err "omg.lol API key not provided. Exiting" |
|||
return 1 |
|||
fi |
|||
|
|||
_endswith "$fulldomain" "omg.lol" |
|||
if [ ! $? ]; then |
|||
_err "Domain name requested is not under omg.lol" |
|||
return 1 |
|||
fi |
|||
|
|||
_endswith "$fulldomain" "$omg_address.omg.lol" |
|||
if [ ! $? ]; then |
|||
_err "Domain name is not a subdomain of provided omg.lol address $omg_address" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug "Required environment parameters are all present" |
|||
} |
|||
|
|||
# Add (or modify) an entry for a new ACME query |
|||
omg_add() { |
|||
address=$1 |
|||
authHeader=$2 |
|||
dnsName=$3 |
|||
txtvalue=$4 |
|||
|
|||
_info "Creating DNS entry for $dnsName" |
|||
_debug2 "omg_add()" |
|||
_debug2 "omg.lol Address: " "$address" |
|||
_secure_debug2 "omg.lol authorization header: " "$authHeader" |
|||
_debug2 "Full Domain name:" "$dnsName.$address.omg.lol" |
|||
_debug2 "TXT value to set:" "$txtvalue" |
|||
|
|||
export _H1="$authHeader" |
|||
|
|||
endpoint="https://api.omg.lol/address/$address/dns" |
|||
_debug2 "Endpoint" "$endpoint" |
|||
|
|||
payload='{"type": "TXT", "name":"'"$dnsName"'", "data":"'"$txtvalue"'", "ttl":30}' |
|||
_debug2 "Payload" "$payload" |
|||
|
|||
response=$(_post "$payload" "$endpoint" "" "POST" "application/json") |
|||
|
|||
omg_validate_add "$response" "$dnsName.$address" "$txtvalue" |
|||
} |
|||
|
|||
omg_validate_add() { |
|||
response=$1 |
|||
name=$2 |
|||
content=$3 |
|||
|
|||
_debug "Validating DNS record addition" |
|||
_debug2 "omg_validate_add()" |
|||
_debug2 "Response" "$response" |
|||
_debug2 "DNS Name" "$name" |
|||
_debug2 "DNS value" "$content" |
|||
|
|||
_jsonResponseCheck "$response" "success" "true" |
|||
if [ "1" = "$?" ]; then |
|||
_err "Response did not report success" |
|||
return 1 |
|||
fi |
|||
|
|||
_jsonResponseCheck "$response" "message" "Your DNS record was created successfully." |
|||
if [ "1" = "$?" ]; then |
|||
_err "Response message did not indicate DNS record was successfully created" |
|||
return 1 |
|||
fi |
|||
|
|||
_jsonResponseCheck "$response" "name" "$name" |
|||
if [ "1" = "$?" ]; then |
|||
_err "Response DNS Name did not match the response received" |
|||
return 1 |
|||
fi |
|||
|
|||
_jsonResponseCheck "$response" "content" "$content" |
|||
if [ "1" = "$?" ]; then |
|||
_err "Response DNS Name did not match the response received" |
|||
return 1 |
|||
fi |
|||
|
|||
_info "Record Created successfully" |
|||
return 0 |
|||
} |
|||
|
|||
omg_getRecords() { |
|||
address=$1 |
|||
authHeader=$2 |
|||
dnsName=$3 |
|||
txtValue=$4 |
|||
|
|||
_debug2 "omg_getRecords()" |
|||
_debug2 "omg.lol Address: " "$address" |
|||
_secure_debug2 "omg.lol Auth Header: " "$authHeader" |
|||
_debug2 "omg.lol DNS name:" "$dnsName" |
|||
_debug2 "txt Value" "$txtValue" |
|||
|
|||
export _H1="$authHeader" |
|||
|
|||
endpoint="https://api.omg.lol/address/$address/dns" |
|||
_debug2 "Endpoint" "$endpoint" |
|||
|
|||
payload=$(_get "$endpoint") |
|||
|
|||
_debug2 "Received Payload:" "$payload" |
|||
|
|||
# Reformat the JSON to be more parseable |
|||
recordID=$(echo "$payload" | _stripWhitespace) |
|||
recordID=$(echo "$recordID" | _exposeJsonArray) |
|||
|
|||
# Now find the one with the right value, and caputre its ID |
|||
recordID=$(echo "$recordID" | grep -- "$txtValue" | grep -i -- "$dnsName.$address") |
|||
_getJsonElement "$recordID" "id" |
|||
} |
|||
|
|||
omg_delete() { |
|||
address=$1 |
|||
authHeader=$2 |
|||
dnsName=$3 |
|||
txtValue=$4 |
|||
|
|||
_info "Deleting DNS entry for $dnsName with value $txtValue" |
|||
_debug2 "omg_delete()" |
|||
_debug2 "omg.lol Address: " "$address" |
|||
_secure_debug2 "omg.lol Auth Header: " "$authHeader" |
|||
_debug2 "Full Domain name:" "$dnsName.$address.omg.lol" |
|||
_debug2 "txt Value" "$txtValue" |
|||
|
|||
record=$(omg_getRecords "$address" "$authHeader" "$dnsName" "$txtvalue") |
|||
if [ "" = "$record" ]; then |
|||
_err "DNS record $address not found!" |
|||
return 1 |
|||
fi |
|||
|
|||
endpoint="https://api.omg.lol/address/$address/dns/$record" |
|||
_debug2 "Endpoint" "$endpoint" |
|||
|
|||
export _H1="$authHeader" |
|||
output=$(_post "" "$endpoint" "" "DELETE") |
|||
|
|||
_debug2 "Response" "$output" |
|||
|
|||
omg_validate_delete "$output" |
|||
} |
|||
|
|||
# Validate the response on request to delete. Confirm stastus is success and |
|||
# Message indicates deletion was successful |
|||
# Input: Response - HTTP response received from delete request |
|||
omg_validate_delete() { |
|||
response=$1 |
|||
|
|||
_info "Validating DNS record deletion" |
|||
_debug2 "omg_validate_delete()" |
|||
_debug2 "Response" "$response" |
|||
|
|||
_jsonResponseCheck "$output" "success" "true" |
|||
if [ "1" = "$?" ]; then |
|||
_err "Response did not report success" |
|||
return 1 |
|||
fi |
|||
|
|||
_jsonResponseCheck "$output" "message" "OK, your DNS record has been deleted." |
|||
if [ "1" = "$?" ]; then |
|||
_err "Response message did not indicate DNS record was successfully deleted" |
|||
return 1 |
|||
fi |
|||
|
|||
_info "Record deleted successfully" |
|||
return 0 |
|||
} |
|||
|
|||
########## Utility Functions ##################################### |
|||
# All utility functions only log at debug3 |
|||
_jsonResponseCheck() { |
|||
response=$1 |
|||
field=$2 |
|||
correct=$3 |
|||
|
|||
correct=$(echo "$correct" | _lower_case) |
|||
|
|||
_debug3 "jsonResponseCheck()" |
|||
_debug3 "Response to parse" "$response" |
|||
_debug3 "Field to get response from" "$field" |
|||
_debug3 "What is the correct response" "$correct" |
|||
|
|||
responseValue=$(_jsonGetLastResponse "$response" "$field") |
|||
|
|||
if [ "$responseValue" != "$correct" ]; then |
|||
_debug3 "Expected: $correct" |
|||
_debug3 "Actual: $responseValue" |
|||
return 1 |
|||
else |
|||
_debug3 "Matched: $responseValue" |
|||
fi |
|||
return 0 |
|||
} |
|||
|
|||
_jsonGetLastResponse() { |
|||
response=$1 |
|||
field=$2 |
|||
|
|||
_debug3 "jsonGetLastResponse()" |
|||
_debug3 "Response provided" "$response" |
|||
_debug3 "Field to get responses for" "$field" |
|||
|
|||
responseValue=$(echo "$response" | grep -- "\"$field\"" | cut -f2 -d":") |
|||
|
|||
_debug3 "Response lines found:" "$responseValue" |
|||
|
|||
responseValue=$(echo "$responseValue" | sed 's/^ //g' | sed 's/^"//g' | sed 's/\\"//g') |
|||
responseValue=$(echo "$responseValue" | sed 's/,$//g' | sed 's/"$//g') |
|||
responseValue=$(echo "$responseValue" | _lower_case) |
|||
|
|||
_debug3 "Responses found" "$responseValue" |
|||
_debug3 "Response Selected" "$(echo "$responseValue" | tail -1)" |
|||
|
|||
echo "$responseValue" | tail -1 |
|||
} |
|||
|
|||
_stripWhitespace() { |
|||
tr -d '\n' | tr -d '\r' | tr -d '\t' | sed -r 's/ +/ /g' | sed 's/\\"//g' |
|||
} |
|||
|
|||
_exposeJsonArray() { |
|||
sed -r 's/.*\[//g' | tr '}' '|' | tr '{' '|' | sed 's/|, |/|/g' | tr '|' '\n' |
|||
} |
|||
|
|||
_getJsonElement() { |
|||
content=$1 |
|||
field=$2 |
|||
|
|||
_debug3 "_getJsonElement()" |
|||
_debug3 "Input JSON element" "$content" |
|||
_debug3 "JSON element to isolate" "$field" |
|||
|
|||
# With a single JSON entry to parse, convert commas to newlines puts each element on |
|||
# its own line - which then allows us to just grep teh name, remove the key, and |
|||
# isolate the value |
|||
output=$(echo "$content" | tr ',' '\n' | grep -- "\"$field\":" | sed 's/.*: //g') |
|||
|
|||
_debug3 "String before unquoting: $output" |
|||
|
|||
_unquoteString "$output" |
|||
} |
|||
|
|||
_createAuthHeader() { |
|||
apikey=$1 |
|||
|
|||
_debug3 "_createAuthHeader()" |
|||
_secure_debug3 "Provided API Key" "$apikey" |
|||
|
|||
authheader="Authorization: Bearer $apikey" |
|||
_secure_debug3 "Authorization Header" "$authheader" |
|||
echo "$authheader" |
|||
} |
|||
|
|||
_getDnsRecordName() { |
|||
fqdn=$1 |
|||
address=$2 |
|||
|
|||
_debug3 "_getDnsRecordName()" |
|||
_debug3 "FQDN" "$fqdn" |
|||
_debug3 "omg.lol Address" "$address" |
|||
|
|||
echo "$fqdn" | sed 's/\.omg\.lol//g' | sed 's/\.'"$address"'$//g' |
|||
} |
|||
|
|||
_unquoteString() { |
|||
output=$1 |
|||
quotes=0 |
|||
|
|||
_debug3 "_unquoteString()" |
|||
_debug3 "Possibly quoted string" "$output" |
|||
|
|||
_startswith "$output" "\"" |
|||
if [ $? ]; then |
|||
quotes=$((quotes + 1)) |
|||
fi |
|||
|
|||
_endswith "$output" "\"" |
|||
if [ $? ]; then |
|||
quotes=$((quotes + 1)) |
|||
fi |
|||
|
|||
_debug3 "Original String: $output" |
|||
_debug3 "Quotes found: $quotes" |
|||
|
|||
if [ $((quotes)) -gt 1 ]; then |
|||
output=$(echo "$output" | sed 's/^"//g' | sed 's/"$//g') |
|||
_debug3 "Quotes removed: $output" |
|||
fi |
|||
|
|||
echo "$output" |
|||
} |
|||
Some files were not shown because too many files changed in this diff
Write
Preview
Loading…
Cancel
Save
Reference in new issue