57 lines
2.0 KiB
Python
57 lines
2.0 KiB
Python
import datetime
|
|
import subprocess
|
|
import time
|
|
from configurator import configurator
|
|
from mongo import mongo
|
|
from blob import minio
|
|
|
|
|
|
class Response:
|
|
code: int
|
|
out: str
|
|
err: str
|
|
|
|
|
|
def call(command: str) -> Response:
|
|
p = subprocess.Popen(command, stderr=subprocess.PIPE, stdout=subprocess.PIPE, shell=True)
|
|
resp = p.wait()
|
|
response = Response()
|
|
response.code = resp
|
|
response.out, response.err = p.stdout.read().decode('utf-8'), p.stderr.read().decode('utf-8')
|
|
return response
|
|
|
|
|
|
def get_hosts() -> list[str]:
|
|
return list(set(configurator.get_config("hosts") + ["platform.chocomarsh.com"]))
|
|
|
|
|
|
def update_host(host: str):
|
|
gen_cert = call(f"docker exec -it $(docker ps -q -f name=infra_nginx) certbot --nginx --email emmtvv@gmail.com --agree-tos -d \"{host}\"")
|
|
if gen_cert.code != 0:
|
|
print(f"failed generating certificate: {gen_cert.err}")
|
|
return
|
|
|
|
fullchain_command = call(f"docker exec -it $(docker ps -q -f name=infra_nginx) -it cat /etc/letsencrypt/live/{host}/fullchain.pem")
|
|
if fullchain_command.code != 0:
|
|
print(f"failed getting fullchain: {fullchain_command.err}")
|
|
return
|
|
|
|
privkey_command = call(f"docker exec -it $(docker ps -q -f name=infra_nginx) -it cat /etc/letsencrypt/live/{host}/privkey.pem")
|
|
if privkey_command.code != 0:
|
|
print(f"failed getting fullchain: {privkey_command.err}")
|
|
return
|
|
fullchain = fullchain_command.out.encode("utf-8")
|
|
privkey = privkey_command.out.encode("utf-8")
|
|
minio.put_object("certupdater", f"certificates/{host}/fullchain.pem", fullchain, len(fullchain))
|
|
minio.put_object("certupdater", f"certificates/{host}/privkey.pem", privkey, len(privkey))
|
|
|
|
|
|
while True:
|
|
now = datetime.datetime.now()
|
|
mongo_hosts = mongo.hosts
|
|
for host in get_hosts():
|
|
if now + datetime.timedelta(days=14) > mongo_hosts.get(host, {"expire_time": datetime.datetime.fromtimestamp(1)})["expire_time"]:
|
|
update_host(host)
|
|
print(f"Host {host} updated")
|
|
mongo.update_date(host)
|
|
time.sleep(5 * 60) |