initial commit
This commit is contained in:
lurchi
commit
8639bdb81b
|
|
@ -0,0 +1,170 @@
|
||||||
|
#!/run/current-system/sw/bin/bash
|
||||||
|
|
||||||
|
# homeserverdns - https://ulrich.earth/code/homeserverdns
|
||||||
|
#
|
||||||
|
# Copyright (C) 2018 Christian Ulrich
|
||||||
|
#
|
||||||
|
# This program is free software: you can redistribute it and/or modify
|
||||||
|
# it under the terms of the GNU General Public License as published by
|
||||||
|
# the Free Software Foundation, either version 3 of the License, or
|
||||||
|
# (at your option) any later version.
|
||||||
|
#
|
||||||
|
# This program is distributed in the hope that it will be useful,
|
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
# GNU General Public License for more details.
|
||||||
|
#
|
||||||
|
# You should have received a copy of the GNU General Public License
|
||||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||||
|
|
||||||
|
readonly required_config_options=("protocol" "auth_key" "domains")
|
||||||
|
readonly default_ttl=300
|
||||||
|
readonly default_public_ip4_hook="upnpc -s | grep ExternalIPAddress | cut -d ' ' -f3"
|
||||||
|
readonly default_update_hook="./homeserverdns-update"
|
||||||
|
|
||||||
|
|
||||||
|
### () -> default_network_interface
|
||||||
|
function get_interface {
|
||||||
|
ip -o -6 route show to default | cut -d " " -f5
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
### (ip_address) -> bool
|
||||||
|
function is_unique_local_address {
|
||||||
|
prefix=$(echo $1 | cut -d ":" -f1)
|
||||||
|
[ "${prefix}" == "fd00" ] && echo true || echo false
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
### (ip_oneline_output) -> ip6_address
|
||||||
|
function extract_ip6 {
|
||||||
|
ip_address=$(echo $1 | tr -s " " | cut -d " " -f4 | cut -d "/" -f1)
|
||||||
|
[ "$(is_unique_local_address $ip_address)" == false ] && echo $ip_address || echo ""
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
### Returns an IPv6 address extracted from a oneline output of ip monitor if
|
||||||
|
### it's global, used for routing and still in use. Returns "" otherwise.
|
||||||
|
### (ip_monitor_output) -> ip6_address
|
||||||
|
function parse_ip_monitor_output {
|
||||||
|
filtered=$(echo $1 | grep -Ev '^Deleted|temporary|deprecated|noprefixroute|preferred_lft 0sec' | grep "scope global")
|
||||||
|
[ -n "${filtered}" ] && echo $(extract_ip6 "${filtered}") || echo ""
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
### (config) -> external_ip4_address
|
||||||
|
function lookup_ip4 {
|
||||||
|
eval "declare -A config="${1#*=}
|
||||||
|
local public_ip4_hook=${config["public_ip4_hook"]}
|
||||||
|
echo $(eval ${public_ip4_hook:-$default_public_ip4_hook})
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
### () -> global_ip6_address
|
||||||
|
function lookup_ip6 {
|
||||||
|
iface=$(get_interface)
|
||||||
|
ip_output=$(ip -6 -o address show dev $iface scope global -temporary -deprecated -noprefixroute | head -n1)
|
||||||
|
echo $(extract_ip6 "${ip_output}")
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
### (config_path) -> config
|
||||||
|
function parse_config {
|
||||||
|
declare -A config
|
||||||
|
while IFS= read -r line
|
||||||
|
do
|
||||||
|
if [ -n "${line}" ] && [[ $line != \#* ]]; then
|
||||||
|
local key value
|
||||||
|
IFS="=" read -r key value <<< $line
|
||||||
|
[ -n "${key}" ] && [ -n "${value}" ] && config[$key]=$value
|
||||||
|
fi
|
||||||
|
done < $1
|
||||||
|
declare -p config
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
### utility function for joining strings
|
||||||
|
### (delimiter, list) -> joined_list
|
||||||
|
function join_by {
|
||||||
|
local IFS=$1
|
||||||
|
shift
|
||||||
|
echo "$*"
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
### utility function for splitting a full-qualified domain name
|
||||||
|
### (fqdn) -> (record_name, second_level_domain)
|
||||||
|
function split_domain {
|
||||||
|
local tokens=(${1//./ })
|
||||||
|
local token_count=${#tokens[*]}
|
||||||
|
local second_level_domain=${tokens[@]:$((token_count - 2))}
|
||||||
|
if [ "${token_count}" -gt 2 ]; then
|
||||||
|
local record_name=${tokens[@]:0:$((token_count - 2))}
|
||||||
|
else
|
||||||
|
local record_name=("@")
|
||||||
|
fi
|
||||||
|
echo $(join_by . ${record_name[@]})" "$(join_by . ${second_level_domain[@]})
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
### (ip4, ip6, config) -> log_output
|
||||||
|
function update {
|
||||||
|
eval "declare -A config="${3#*=}
|
||||||
|
local domains=(${config["domains"]})
|
||||||
|
local update_hook=${config["update_hook"]}
|
||||||
|
export PROTOCOL=${config["protocol"]}
|
||||||
|
export API_ADDRESS=${config["api_address"]}
|
||||||
|
export USER=${config["user"]}
|
||||||
|
export AUTH_KEY=${config["auth_key"]}
|
||||||
|
#export IP4=$1
|
||||||
|
#export IP6=$2
|
||||||
|
export TTL=${config["ttl"]:-$default_ttl}
|
||||||
|
for domain in "${domains[@]}"; do
|
||||||
|
local record_name second_level_domain
|
||||||
|
read -r record_name second_level_domain <<< $(split_domain $domain)
|
||||||
|
export DOMAIN=$domain
|
||||||
|
export L2_DOMAIN=$second_level_domain
|
||||||
|
export RECORD_NAME=$record_name
|
||||||
|
echo "[$(date "+%Y-%m-%d %H:%M")] updating ${domain} ..."
|
||||||
|
if [ -n "$1" ]; then
|
||||||
|
echo -n "| setting A=$1 ... "
|
||||||
|
echo "status: "$(eval "IP4=$1 bash ${update_hook:-$default_update_hook}")
|
||||||
|
fi
|
||||||
|
if [ -n "$2" ]; then
|
||||||
|
echo -n "| setting AAAA=$2 ... "
|
||||||
|
echo "status: "$(eval "IP6=$2 bash ${update_hook:-$default_update_hook}")
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
function main {
|
||||||
|
if [ "$#" -ne 1 ]; then
|
||||||
|
echo "usage: $0 CONFIG_FILE"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
config=$(parse_config $1)
|
||||||
|
eval "declare -A config="${config#*=}
|
||||||
|
for key in "${required_config_options[@]}"; do
|
||||||
|
if [ -z "${config[$key]}" ]; then
|
||||||
|
echo "configuration is missing option \"${key}\"" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
local ip4=$(lookup_ip4 "$(declare -p config)")
|
||||||
|
local ip6=$(lookup_ip6)
|
||||||
|
update "${ip4}" "${ip6}" "$(declare -p config)"
|
||||||
|
ip -6 -o monitor address dev $(get_interface) |
|
||||||
|
while IFS= read -r line
|
||||||
|
do
|
||||||
|
ip4=$(lookup_ip4 "$(declare -p config)")
|
||||||
|
local new_ip6=$(parse_ip_monitor_output "${line}")
|
||||||
|
#echo "ip-monitor output was ${line}"
|
||||||
|
if [ -n "${new_ip6}" ] && [ "${new_ip6}" != "${ip6}" ]; then
|
||||||
|
ip6=$new_ip6
|
||||||
|
update "${ip4}" "${ip6}" "$(declare -p config)"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
main "$@"
|
||||||
|
|
@ -0,0 +1,104 @@
|
||||||
|
#!/run/current-system/sw/bin/bash
|
||||||
|
|
||||||
|
# homeserverdns - https://ulrich.earth/code/homeserverdns
|
||||||
|
#
|
||||||
|
# Copyright (C) 2018 Christian Ulrich
|
||||||
|
#
|
||||||
|
# This program is free software: you can redistribute it and/or modify
|
||||||
|
# it under the terms of the GNU General Public License as published by
|
||||||
|
# the Free Software Foundation, either version 3 of the License, or
|
||||||
|
# (at your option) any later version.
|
||||||
|
#
|
||||||
|
# This program is distributed in the hope that it will be useful,
|
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
# GNU General Public License for more details.
|
||||||
|
#
|
||||||
|
# You should have received a copy of the GNU General Public License
|
||||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||||
|
|
||||||
|
|
||||||
|
# This script is called by homeserverdns-daemon for updating A/AAAA records.
|
||||||
|
# These environment variables will be set by homeserverdns-daemon:
|
||||||
|
#
|
||||||
|
# PROTOCOL protocol name (gandi|dyndns|httpnet)
|
||||||
|
# API_ADDRESS address for API requests, required for dnydns protocol
|
||||||
|
# USER user name for authentication at the API
|
||||||
|
# AUTH_KEY authentication token for authentication at the API
|
||||||
|
# DOMAIN fqdn for which A/AAAA records will be set
|
||||||
|
# L2_DOMAIN second-level domain for which A/AAAA records will be set
|
||||||
|
# RECORD_NAME name of the record to be set
|
||||||
|
# IP4 new value of the A record (IP4 or IP6 will be set exclusively)
|
||||||
|
# IP6 new value of the AAAA record (IP4 or IP6 will be set exclusively)
|
||||||
|
# TTL new TTL value for the A/AAAA records, required for gandi protocol
|
||||||
|
|
||||||
|
|
||||||
|
### gandi.net LiveDNS API
|
||||||
|
### () -> status_code
|
||||||
|
function update_gandi {
|
||||||
|
local url="https://dns.api.gandi.net/api/v5/domains/${L2_DOMAIN}/records/${RECORD_NAME}"
|
||||||
|
local ip=""
|
||||||
|
if [ -n "${IP4}" ]; then
|
||||||
|
url="${url}/A"
|
||||||
|
ip=$IP4
|
||||||
|
elif [ -n "${IP6}" ]; then
|
||||||
|
url="${url}/AAAA"
|
||||||
|
ip=$IP6
|
||||||
|
fi
|
||||||
|
status=$(curl -o /dev/null -s -w "%{http_code}\n" \
|
||||||
|
-X PUT \
|
||||||
|
-H "Content-Type:application/json" \
|
||||||
|
-H "X-Api-Key:${AUTH_KEY}" \
|
||||||
|
-d "{\"rrset_ttl\":${TTL},\"rrset_values\":[\"${ip}\"]}" \
|
||||||
|
$url)
|
||||||
|
echo "${status}"
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
# FIXME: untested
|
||||||
|
### http.net DNS API v1
|
||||||
|
### () -> status_code
|
||||||
|
function update_httpnet {
|
||||||
|
local current_ip4=$(dig A +short $DOMAIN)
|
||||||
|
local current_ip6=$(dig AAAA +short $DOMAIN)
|
||||||
|
local url="https://partner.http.net/api/dns/v1/json/zoneUpdate"
|
||||||
|
local items_add=""
|
||||||
|
local items_delete=""
|
||||||
|
if [ -n "${IP4}" ]; then
|
||||||
|
items_add="{\"name\":\"${DOMAIN}\",\"type\":\"A\",\"content\":\"${IP4}\",\"ttl\":\"${TTL}\"}"
|
||||||
|
elif [ -n "${IP6}" ]; then
|
||||||
|
items_add="{\"name\":\"${DOMAIN}\",\"type\":\"AAAA\",\"content\":\"${IP6}\",\"ttl\":\"${TTL}\"}"
|
||||||
|
fi
|
||||||
|
if [ -n "${current_ip4}" ]; then
|
||||||
|
items_delete="{\"name\":\"${DOMAIN}\",\"type\":\"A\",\"content\":\"${current_ip4}\"}"
|
||||||
|
fi
|
||||||
|
if [ -n "${current_ip6}" ]; then
|
||||||
|
items_delete="{\"name\":\"${DOMAIN}\",\"type\":\"AAAA\",\"content\":\"${current_ip6}\"}"
|
||||||
|
fi
|
||||||
|
status=$(curl -o /dev/null -s -w "%{http_code}\n" \
|
||||||
|
-X PUT \
|
||||||
|
-d "{\"authToken\":\"${AUTH_KEY}\"," \
|
||||||
|
"\"zoneConfig\":{\"name\":\"${L2_DOMAIN}\"}," \
|
||||||
|
"\"recordsToAdd\":[${items_add}]," \
|
||||||
|
"\"recordsToDelete\":[${items_delete}]}" \
|
||||||
|
$url)
|
||||||
|
echo "${status}"
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
# FIXME: untested
|
||||||
|
### dyndns API v2/v3 API
|
||||||
|
### () -> status_code
|
||||||
|
function update_dyndns {
|
||||||
|
local hostname=${L2_DOMAIN}
|
||||||
|
if [ "${RECORD_NAME}" != "@" ]; then
|
||||||
|
local hostname=$DOMAIN
|
||||||
|
fi
|
||||||
|
local address=${IP4:-$IP6}
|
||||||
|
local url="https://${USER}:${AUTH_KEY}@${API_ADDRESS}?hostname=${hostname}&myip=${address}"
|
||||||
|
status=$(curl -o /dev/null -s -w "%{http_code}\n" $url)
|
||||||
|
echo "${url} ${status}"
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
eval "update_${PROTOCOL}"
|
||||||
|
|
@ -0,0 +1,31 @@
|
||||||
|
# Protocol name, may be left empty when using a custom update_hook.
|
||||||
|
# The default update_hook supports: gandi, dyndns
|
||||||
|
protocol=
|
||||||
|
|
||||||
|
# The command to be called to determine our public IP address. By default UPNP
|
||||||
|
# will be used
|
||||||
|
public_ip4_hook=
|
||||||
|
|
||||||
|
# The command to be called when an IP change is detected. Environment variables
|
||||||
|
# will be set when calling it (for documentation see homeserverdns-update).
|
||||||
|
# Default: ./homeserverdns-update
|
||||||
|
update_hook=
|
||||||
|
|
||||||
|
# The address of the API, required for dyndns protocol.
|
||||||
|
# Example: dyndns.strato.com/nic/update
|
||||||
|
api_address=
|
||||||
|
|
||||||
|
# User name for authentication at the API (not all protocols require this).
|
||||||
|
user=
|
||||||
|
|
||||||
|
# Token used for authentication at the API
|
||||||
|
auth_key=
|
||||||
|
|
||||||
|
# Time-to-live for the A/AAAA records (not all protocols support this).
|
||||||
|
# default: 300
|
||||||
|
ttl=
|
||||||
|
|
||||||
|
# A space separated list of the domains for which the A/AAAA records shall be
|
||||||
|
# updated. For each domain the update_hook will be called.
|
||||||
|
domains=
|
||||||
|
|
||||||
Loading…
Reference in New Issue