pob
/
cloudflare
mirror of https://github.com/K0p1-Git/cloudflare-ddns-updater
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Store client secrets in a standard location

Browse Source
pull/84/head
Jared Contrascere 1 year ago
parent ac2f74f980
commit bb67bef3b3
1 changed files with 71 additions and 38 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 109
      cloudflare-template.sh

109
cloudflare-template.sh
Unescape View File

@ -1,18 +1,39 @@
#!/bin/bash
## change to "bin/sh" when necessary
auth_email="" # The email used to login 'https://dash.cloudflare.com'
auth_method="token" # Set to "global" for Global API Key or "token" for Scoped API Token
auth_key="" # Your API Token or Global API Key
zone_identifier="" # Can be found in the "Overview" tab of your domain
record_name="" # Which record you want to be synced
ttl="3600" # Set the DNS TTL (seconds)
proxy="false" # Set the proxy to true or false
sitename="" # Title of site "Example Site"
slackchannel="" # Slack Channel #example
slackuri="" # URI for Slack WebHook "https://hooks.slack.com/services/xxxxx"
discorduri="" # URI for Discord WebHook "https://discordapp.com/api/webhooks/xxxxx"
# Set client secrets location.
# From: https://www.reddit.com/r/bash/comments/puujxk/comment/he7bz9s/
API_KEY_DIR=${XDG_CONF_HOME:-$HOME/.config}/cloudflare
# Create a directory for client secrets if it does not exist.
if [ ! -d "${API_KEY_DIR}" ]; then
mkdir -p "${API_KEY_DIR}"
SECRETS_FILE=${API_KEY_DIR}/secrets.env
# Create a secrets.env file template.
touch ${SECRETS_FILE}
echo -en "#/bin/bash\n\n# These are secrets used by the `cloudflare-ddns-updater` script.\n\n" > ${SECRETS_FILE}
echo "CLOUDFLARE_AUTH_EMAIL=\"\" # The email used to login 'https://dash.cloudflare.com'" >> ${SECRETS_FILE}
echo "CLOUDFLARE_AUTH_METHOD=\"token\" # Set to "global" for Global API Key or "token" for Scoped API Token" >> ${SECRETS_FILE}
echo "CLOUDFLARE_AUTH_KEY=\"\" # Your API Token or Global API Key" >> ${SECRETS_FILE}
echo "CLOUDFLARE_ZONE_IDENTIFIER=\"\" # Can be found in the "Overview" tab of your domain" >> ${SECRETS_FILE}
echo "CLOUDFLARE_RECORD_NAME=\"\" # Which record you want to be synced (hint: the fully-qualified domain name)" >> ${SECRETS_FILE}
echo "CLOUDFLARE_TTL=\"3600\" # Set the DNS TTL (seconds)" >> ${SECRETS_FILE}
echo "CLOUDFLARE_PROXY=\"false\" # Set the proxy to true or false" >> ${SECRETS_FILE}
echo "CLOUDFLARE_SITENAME=\"\" # Title of site \"Example Site\" used in Slack and/or Discord notifications" >> ${SECRETS_FILE}
echo "CLOUDFLARE_SLACKCHANNEL=\"\" # Slack Channel #example" >> ${SECRETS_FILE}
echo "CLOUDFLARE_SLACKURI=\"\" # URI for Slack WebHook "https://hooks.slack.com/services/xxxxx"" >> ${SECRETS_FILE}
echo "CLOUDFLARE_DISCORDURI=\"\" # URI for Discord WebHook "https://discordapp.com/api/webhooks/xxxxx"" >> ${SECRETS_FILE}
echo "No client secrets file was found. Please fill in the values in ${SECRETS_FILE}"
exit
fi
SECRETS_FILE="${API_KEY_DIR}/secrets.env"
# Load client secrets.
. ${SECRETS_FILE}
###########################################
## Check if we have a public IP
@ -36,7 +57,7 @@ fi
###########################################
## Check and set the proper auth header
###########################################
if [[ "${auth_method}" == "global" ]]; then
if [[ "${CLOUDFLARE_AUTH_METHOD}" == "global" ]]; then
auth_header="X-Auth-Key:"
else
auth_header="Authorization: Bearer"
@ -47,16 +68,15 @@ fi
###########################################
logger "DDNS Updater: Check Initiated"
record=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones/$zone_identifier/dns_records?type=A&name=$record_name" \
-H "X-Auth-Email: $auth_email" \
-H "$auth_header $auth_key" \
record=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones/${CLOUDFLARE_ZONE_IDENTIFIER}/dns_records?type=A&name=${CLOUDFLARE_RECORD_NAME}" \
-H "X-Auth-Email: ${CLOUDFLARE_AUTH_EMAIL}" \
-H "$auth_header ${CLOUDFLARE_AUTH_KEY}" \
-H "Content-Type: application/json")
###########################################
## Check if the domain has an A record
###########################################
if [[ $record == *"\"count\":0"* ]]; then
logger -s "DDNS Updater: Record does not exist, perhaps create one first? (${ip} for ${record_name})"
logger -s "DDNS Updater: Record does not exist, perhaps create one first? (${ip} for ${CLOUDFLARE_RECORD_NAME})"
exit 1
fi
@ -66,7 +86,7 @@ fi
old_ip=$(echo "$record" | sed -E 's/.*"content":"(([0-9]{1,3}\.){3}[0-9]{1,3})".*/\1/')
# Compare if they're the same
if [[ $ip == $old_ip ]]; then
logger "DDNS Updater: IP ($ip) for ${record_name} has not changed."
logger "DDNS Updater: IP ($ip) for ${CLOUDFLARE_RECORD_NAME} has not changed."
exit 0
fi
@ -78,46 +98,59 @@ record_identifier=$(echo "$record" | sed -E 's/.*"id":"([A-Za-z0-9_]+)".*/\1/')
###########################################
## Change the IP@Cloudflare using the API
###########################################
update=$(curl -s -X PATCH "https://api.cloudflare.com/client/v4/zones/$zone_identifier/dns_records/$record_identifier" \
-H "X-Auth-Email: $auth_email" \
-H "$auth_header $auth_key" \
update=$(curl -s -X PATCH "https://api.cloudflare.com/client/v4/zones/${CLOUDFLARE_ZONE_IDENTIFIER}/dns_records/$record_identifier" \
-H "X-Auth-Email: ${CLOUDFLARE_AUTH_EMAIL}" \
-H "$auth_header ${CLOUDFLARE_AUTH_KEY}" \
-H "Content-Type: application/json" \
--data "{\"type\":\"A\",\"name\":\"$record_name\",\"content\":\"$ip\",\"ttl\":\"$ttl\",\"proxied\":${proxy}}")
--data "{\"type\":\"A\",\"name\":\"${CLOUDFLARE_RECORD_NAME}\",\"content\":\"$ip\",\"${CLOUDFLARE_TTL}\":\"${CLOUDFLARE_TTL}\",\"proxied\":${CLOUDFLARE_PROXY}}")
###########################################
## Report the status
###########################################
case "$update" in
*"\"success\":false"*)
echo -e "DDNS Updater: $ip $record_name DDNS failed for $record_identifier ($ip). DUMPING RESULTS:\n$update" | logger -s
if [[ $slackuri != "" ]]; then
curl -L -X POST $slackuri \
echo -e "DDNS Updater: $ip ${CLOUDFLARE_RECORD_NAME} DDNS failed for $record_identifier ($ip). DUMPING RESULTS:\n$update" | logger -s
if [[ ${CLOUDFLARE_SLACK_URI} != "" ]]; then
curl -L -X POST ${CLOUDFLARE_SLACK_URI} \
--data-raw '{
"channel": "'$slackchannel'",
"text" : "'"$sitename"' DDNS Update Failed: '$record_name': '$record_identifier' ('$ip')."
"channel": "'${CLOUDFLARE_SLACKCHANNEL}'",
"text" : "'"${CLOUDFLARE_SITENAME}"' DDNS Update Failed: '${CLOUDFLARE_RECORD_NAME}': '$record_identifier' ('$ip')."
}'
fi
if [[ $discorduri != "" ]]; then
if [[ ${CLOUDFLARE_DISCORD_URI} != "" ]]; then
curl -i -H "Accept: application/json" -H "Content-Type:application/json" -X POST \
--data-raw '{
"content" : "'"$sitename"' DDNS Update Failed: '$record_name': '$record_identifier' ('$ip')."
}' $discorduri
"content" : "'"${CLOUDFLARE_SITENAME}"' DDNS Update Failed: '${CLOUDFLARE_RECORD_NAME}': '$record_identifier' ('$ip')."
}' ${CLOUDFLARE_DISCORD_URI}
fi
exit 1;;
*)
logger "DDNS Updater: $ip $record_name DDNS updated."
if [[ $slackuri != "" ]]; then
curl -L -X POST $slackuri \
logger "DDNS Updater: $ip ${CLOUDFLARE_RECORD_NAME} DDNS updated."
if [[ ${CLOUDFLARE_SLACK_URI} != "" ]]; then
curl -L -X POST ${CLOUDFLARE_SLACK_URI} \
--data-raw '{
"channel": "'$slackchannel'",
"text" : "'"$sitename"' Updated: '$record_name''"'"'s'""' new IP Address is '$ip'"
"channel": "'${CLOUDFLARE_SLACKCHANNEL}'",
"text" : "'"${CLOUDFLARE_SITENAME}"' Updated: '${CLOUDFLARE_RECORD_NAME}''"'"'s'""' new IP Address is '$ip'"
}'
fi
if [[ $discorduri != "" ]]; then
if [[ ${CLOUDFLARE_DISCORD_URI} != "" ]]; then
curl -i -H "Accept: application/json" -H "Content-Type:application/json" -X POST \
--data-raw '{
"content" : "'"$sitename"' Updated: '$record_name''"'"'s'""' new IP Address is '$ip'"
}' $discorduri
"content" : "'"${CLOUDFLARE_SITENAME}"' Updated: '${CLOUDFLARE_RECORD_NAME}''"'"'s'""' new IP Address is '$ip'"
}' ${CLOUDFLARE_DISCORD_URI}
fi
exit 0;;
esac
unset CLOUDFLARE_AUTH_EMAIL=""
unset CLOUDFLARE_AUTH_METHOD="TOKEN"
unset CLOUDFLARE_AUTH_KEY=""
unset CLOUDFLARE_ZONE_IDENTIFIER=""
unset CLOUDFLARE_RECORD_NAME=""
unset CLOUDFLARE_TTL="3600"
unset CLOUDFLARE_PROXY="FALSE"
unset CLOUDFLARE_SITENAME=""
unset CLOUDFLARE_SLACKCHANNEL=""
unset CLOUDFLARE_SLACKURI=""
unset CLOUDFLARE_DISCORDURI=""

Write Preview
Loading…
Cancel
Save