pob
/
cloudflare
mirror of https://github.com/K0p1-Git/cloudflare-ddns-updater
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Store client secrets in a standard location

Browse Source
pull/84/head
Jared Contrascere 1 year ago
parent ac2f74f980
commit bb67bef3b3
1 changed files with 71 additions and 38 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 109
      cloudflare-template.sh

109
cloudflare-template.sh
Unescape View File

@ -1,18 +1,39 @@
#!/bin/bash #!/bin/bash
## change to "bin/sh" when necessary ## change to "bin/sh" when necessary
auth_email="" # The email used to login 'https://dash.cloudflare.com' # Set client secrets location.
auth_method="token" # Set to "global" for Global API Key or "token" for Scoped API Token # From: https://www.reddit.com/r/bash/comments/puujxk/comment/he7bz9s/
auth_key="" # Your API Token or Global API Key API_KEY_DIR=${XDG_CONF_HOME:-$HOME/.config}/cloudflare
zone_identifier="" # Can be found in the "Overview" tab of your domain
record_name="" # Which record you want to be synced
ttl="3600" # Set the DNS TTL (seconds)
proxy="false" # Set the proxy to true or false
sitename="" # Title of site "Example Site"
slackchannel="" # Slack Channel #example
slackuri="" # URI for Slack WebHook "https://hooks.slack.com/services/xxxxx"
discorduri="" # URI for Discord WebHook "https://discordapp.com/api/webhooks/xxxxx"
# Create a directory for client secrets if it does not exist.
if [ ! -d "${API_KEY_DIR}" ]; then
mkdir -p "${API_KEY_DIR}"
SECRETS_FILE=${API_KEY_DIR}/secrets.env
# Create a secrets.env file template.
touch ${SECRETS_FILE}
echo -en "#/bin/bash\n\n# These are secrets used by the `cloudflare-ddns-updater` script.\n\n" > ${SECRETS_FILE}
echo "CLOUDFLARE_AUTH_EMAIL=\"\" # The email used to login 'https://dash.cloudflare.com'" >> ${SECRETS_FILE}
echo "CLOUDFLARE_AUTH_METHOD=\"token\" # Set to "global" for Global API Key or "token" for Scoped API Token" >> ${SECRETS_FILE}
echo "CLOUDFLARE_AUTH_KEY=\"\" # Your API Token or Global API Key" >> ${SECRETS_FILE}
echo "CLOUDFLARE_ZONE_IDENTIFIER=\"\" # Can be found in the "Overview" tab of your domain" >> ${SECRETS_FILE}
echo "CLOUDFLARE_RECORD_NAME=\"\" # Which record you want to be synced (hint: the fully-qualified domain name)" >> ${SECRETS_FILE}
echo "CLOUDFLARE_TTL=\"3600\" # Set the DNS TTL (seconds)" >> ${SECRETS_FILE}
echo "CLOUDFLARE_PROXY=\"false\" # Set the proxy to true or false" >> ${SECRETS_FILE}
echo "CLOUDFLARE_SITENAME=\"\" # Title of site \"Example Site\" used in Slack and/or Discord notifications" >> ${SECRETS_FILE}
echo "CLOUDFLARE_SLACKCHANNEL=\"\" # Slack Channel #example" >> ${SECRETS_FILE}
echo "CLOUDFLARE_SLACKURI=\"\" # URI for Slack WebHook "https://hooks.slack.com/services/xxxxx"" >> ${SECRETS_FILE}
echo "CLOUDFLARE_DISCORDURI=\"\" # URI for Discord WebHook "https://discordapp.com/api/webhooks/xxxxx"" >> ${SECRETS_FILE}
echo "No client secrets file was found. Please fill in the values in ${SECRETS_FILE}"
exit
fi
SECRETS_FILE="${API_KEY_DIR}/secrets.env"
# Load client secrets.
. ${SECRETS_FILE}
########################################### ###########################################
## Check if we have a public IP ## Check if we have a public IP
@ -36,7 +57,7 @@ fi
########################################### ###########################################
## Check and set the proper auth header ## Check and set the proper auth header
########################################### ###########################################
if [[ "${auth_method}" == "global" ]]; then if [[ "${CLOUDFLARE_AUTH_METHOD}" == "global" ]]; then
auth_header="X-Auth-Key:" auth_header="X-Auth-Key:"
else else
auth_header="Authorization: Bearer" auth_header="Authorization: Bearer"
@ -47,16 +68,15 @@ fi
########################################### ###########################################
logger "DDNS Updater: Check Initiated" logger "DDNS Updater: Check Initiated"
record=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones/$zone_identifier/dns_records?type=A&name=$record_name" \ record=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones/${CLOUDFLARE_ZONE_IDENTIFIER}/dns_records?type=A&name=${CLOUDFLARE_RECORD_NAME}" \
-H "X-Auth-Email: $auth_email" \ -H "X-Auth-Email: ${CLOUDFLARE_AUTH_EMAIL}" \
-H "$auth_header $auth_key" \ -H "$auth_header ${CLOUDFLARE_AUTH_KEY}" \
-H "Content-Type: application/json") -H "Content-Type: application/json")
########################################### ###########################################
## Check if the domain has an A record ## Check if the domain has an A record
########################################### ###########################################
if [[ $record == *"\"count\":0"* ]]; then if [[ $record == *"\"count\":0"* ]]; then
logger -s "DDNS Updater: Record does not exist, perhaps create one first? (${ip} for ${record_name})" logger -s "DDNS Updater: Record does not exist, perhaps create one first? (${ip} for ${CLOUDFLARE_RECORD_NAME})"
exit 1 exit 1
fi fi
@ -66,7 +86,7 @@ fi
old_ip=$(echo "$record" | sed -E 's/.*"content":"(([0-9]{1,3}\.){3}[0-9]{1,3})".*/\1/') old_ip=$(echo "$record" | sed -E 's/.*"content":"(([0-9]{1,3}\.){3}[0-9]{1,3})".*/\1/')
# Compare if they're the same # Compare if they're the same
if [[ $ip == $old_ip ]]; then if [[ $ip == $old_ip ]]; then
logger "DDNS Updater: IP ($ip) for ${record_name} has not changed." logger "DDNS Updater: IP ($ip) for ${CLOUDFLARE_RECORD_NAME} has not changed."
exit 0 exit 0
fi fi
@ -78,46 +98,59 @@ record_identifier=$(echo "$record" | sed -E 's/.*"id":"([A-Za-z0-9_]+)".*/\1/')
########################################### ###########################################
## Change the IP@Cloudflare using the API ## Change the IP@Cloudflare using the API
########################################### ###########################################
update=$(curl -s -X PATCH "https://api.cloudflare.com/client/v4/zones/$zone_identifier/dns_records/$record_identifier" \ update=$(curl -s -X PATCH "https://api.cloudflare.com/client/v4/zones/${CLOUDFLARE_ZONE_IDENTIFIER}/dns_records/$record_identifier" \
-H "X-Auth-Email: $auth_email" \ -H "X-Auth-Email: ${CLOUDFLARE_AUTH_EMAIL}" \
-H "$auth_header $auth_key" \ -H "$auth_header ${CLOUDFLARE_AUTH_KEY}" \
-H "Content-Type: application/json" \ -H "Content-Type: application/json" \
--data "{\"type\":\"A\",\"name\":\"$record_name\",\"content\":\"$ip\",\"ttl\":\"$ttl\",\"proxied\":${proxy}}") --data "{\"type\":\"A\",\"name\":\"${CLOUDFLARE_RECORD_NAME}\",\"content\":\"$ip\",\"${CLOUDFLARE_TTL}\":\"${CLOUDFLARE_TTL}\",\"proxied\":${CLOUDFLARE_PROXY}}")
########################################### ###########################################
## Report the status ## Report the status
########################################### ###########################################
case "$update" in case "$update" in
*"\"success\":false"*) *"\"success\":false"*)
echo -e "DDNS Updater: $ip $record_name DDNS failed for $record_identifier ($ip). DUMPING RESULTS:\n$update" | logger -s echo -e "DDNS Updater: $ip ${CLOUDFLARE_RECORD_NAME} DDNS failed for $record_identifier ($ip). DUMPING RESULTS:\n$update" | logger -s
if [[ $slackuri != "" ]]; then if [[ ${CLOUDFLARE_SLACK_URI} != "" ]]; then
curl -L -X POST $slackuri \ curl -L -X POST ${CLOUDFLARE_SLACK_URI} \
--data-raw '{ --data-raw '{
"channel": "'$slackchannel'", "channel": "'${CLOUDFLARE_SLACKCHANNEL}'",
"text" : "'"$sitename"' DDNS Update Failed: '$record_name': '$record_identifier' ('$ip')." "text" : "'"${CLOUDFLARE_SITENAME}"' DDNS Update Failed: '${CLOUDFLARE_RECORD_NAME}': '$record_identifier' ('$ip')."
}' }'
fi fi
if [[ $discorduri != "" ]]; then if [[ ${CLOUDFLARE_DISCORD_URI} != "" ]]; then
curl -i -H "Accept: application/json" -H "Content-Type:application/json" -X POST \ curl -i -H "Accept: application/json" -H "Content-Type:application/json" -X POST \
--data-raw '{ --data-raw '{
"content" : "'"$sitename"' DDNS Update Failed: '$record_name': '$record_identifier' ('$ip')." "content" : "'"${CLOUDFLARE_SITENAME}"' DDNS Update Failed: '${CLOUDFLARE_RECORD_NAME}': '$record_identifier' ('$ip')."
}' $discorduri }' ${CLOUDFLARE_DISCORD_URI}
fi fi
exit 1;; exit 1;;
*) *)
logger "DDNS Updater: $ip $record_name DDNS updated." logger "DDNS Updater: $ip ${CLOUDFLARE_RECORD_NAME} DDNS updated."
if [[ $slackuri != "" ]]; then if [[ ${CLOUDFLARE_SLACK_URI} != "" ]]; then
curl -L -X POST $slackuri \ curl -L -X POST ${CLOUDFLARE_SLACK_URI} \
--data-raw '{ --data-raw '{
"channel": "'$slackchannel'", "channel": "'${CLOUDFLARE_SLACKCHANNEL}'",
"text" : "'"$sitename"' Updated: '$record_name''"'"'s'""' new IP Address is '$ip'" "text" : "'"${CLOUDFLARE_SITENAME}"' Updated: '${CLOUDFLARE_RECORD_NAME}''"'"'s'""' new IP Address is '$ip'"
}' }'
fi fi
if [[ $discorduri != "" ]]; then if [[ ${CLOUDFLARE_DISCORD_URI} != "" ]]; then
curl -i -H "Accept: application/json" -H "Content-Type:application/json" -X POST \ curl -i -H "Accept: application/json" -H "Content-Type:application/json" -X POST \
--data-raw '{ --data-raw '{
"content" : "'"$sitename"' Updated: '$record_name''"'"'s'""' new IP Address is '$ip'" "content" : "'"${CLOUDFLARE_SITENAME}"' Updated: '${CLOUDFLARE_RECORD_NAME}''"'"'s'""' new IP Address is '$ip'"
}' $discorduri }' ${CLOUDFLARE_DISCORD_URI}
fi fi
exit 0;; exit 0;;
esac esac
unset CLOUDFLARE_AUTH_EMAIL=""
unset CLOUDFLARE_AUTH_METHOD="TOKEN"
unset CLOUDFLARE_AUTH_KEY=""
unset CLOUDFLARE_ZONE_IDENTIFIER=""
unset CLOUDFLARE_RECORD_NAME=""
unset CLOUDFLARE_TTL="3600"
unset CLOUDFLARE_PROXY="FALSE"
unset CLOUDFLARE_SITENAME=""
unset CLOUDFLARE_SLACKCHANNEL=""
unset CLOUDFLARE_SLACKURI=""
unset CLOUDFLARE_DISCORDURI=""

Write Preview
Loading…
Cancel
Save