import datetime import subprocess import time from configurator import configurator from mongo import mongo from blob import minio class Response: code: int out: str err: str def call(command: str) -> Response: p = subprocess.Popen(command, stderr=subprocess.PIPE, stdout=subprocess.PIPE, shell=True) resp = p.wait() response = Response() response.code = resp response.out, response.err = p.stdout.read().decode('utf-8'), p.stderr.read().decode('utf-8') return response def get_hosts() -> list[str]: return list(set(configurator.get_config("hosts") + ["platform.chocomarsh.com"])) def update_host(host: str): gen_cert = call(f"docker exec -it $(docker ps -q -f name=infra_nginx) certbot --nginx --email emmtvv@gmail.com --agree-tos -d \"{host}\"") if gen_cert.code != 0: print(f"failed generating certificate: {gen_cert.err}") return fullchain_command = call(f"docker exec -it $(docker ps -q -f name=infra_nginx) -it cat /etc/letsencrypt/live/{host}/fullchain.pem") if fullchain_command.code != 0: print(f"failed getting fullchain: {fullchain_command.err}") return privkey_command = call(f"docker exec -it $(docker ps -q -f name=infra_nginx) -it cat /etc/letsencrypt/live/{host}/privkey.pem") if privkey_command.code != 0: print(f"failed getting fullchain: {privkey_command.err}") return fullchain = fullchain_command.out.encode("utf-8") privkey = privkey_command.out.encode("utf-8") minio.put_object("certupdater", f"certificates/{host}/fullchain.pem", fullchain, len(fullchain)) minio.put_object("certupdater", f"certificates/{host}/privkey.pem", privkey, len(privkey)) while True: now = datetime.datetime.now() mongo_hosts = mongo.hosts for host in get_hosts(): if now + datetime.timedelta(days=14) > mongo_hosts.get(host, {"expire_time": datetime.datetime.fromtimestamp(1)})["expire_time"]: update_host(host) print(f"Host {host} updated") mongo.update_date(host) time.sleep(5 * 60)