# coding: utf-8 # ------------------------------------------------------------------- # YakPanel # ------------------------------------------------------------------- # Copyright (c) 2015-2099 YakPanel(www.yakpanel.com) All rights reserved. # ------------------------------------------------------------------- # Author: wzz # ------------------------------------------------------------------- import json import os import traceback from datetime import datetime import public from btdockerModelV2 import dk_public as dp from btdockerModelV2.dockerBase import dockerBase from public.validate import Param class main(dockerBase): # 2023/12/27 下午 2:56 创建容器反向代理 def create_proxy(self, get): ''' @name 创建容器反向代理 @author wzz <2023/12/27 下午 2:57> @param "data":{"参数名":""} <数据类型> 参数描述 @return dict{"status":True/False,"msg":"提示信息"} ''' # 校验参数 try: get.validate([ Param('domain').Require(), Param('container_port').Require(), Param('container_name').Require(), Param('container_id').Require(), Param('privateKey').Require(), Param('certPem').Require(), ], [ public.validate.trim_filter(), ]) except Exception as ex: public.print_log("error info: {}".format(ex)) return public.return_message(-1, 0, ex) # try: if not (os.path.exists('/etc/init.d/nginx') or os.path.exists('/etc/init.d/httpd')): return public.return_message(-1, 0, public.lang("nginx or apache server was not detected, please install one first!")) # if not hasattr(get, 'domain'): # return public.return_message(-1, 0, public.lang("parameter error")) # # if not hasattr(get, 'container_port'): # return public.return_message(-1, 0, public.lang("parameter error")) self.siteName = get.domain.strip() self.check_table_dk_sites() if dp.sql('dk_sites').where('container_id=?', (get.container_id,)).order('id desc').find(): self.close_proxy(get) # 2024/2/23 下午 12:05 如果其他地方有这个域名，则禁止添加 newpid = public.M('domain').where("name=? and port=?", (self.siteName, 80)).getField('pid') if newpid: result = public.M('sites').where("id=?", (newpid,)).find() if result: return public.return_message(-1, 0, public.lang("Project Type [{}] Existing Domain: {}", result['project_type'],self.siteName)) self.container_port = get.container_port if not dp.check_socket(self.container_port): return public.return_message(-1, 0, public.lang("Server port [ {}] is not used, please enter the port in use to reverse!", self.container_port)) # todo mod的反向代理 from mod.project.proxy.comMod import main as proxyMod pMod = proxyMod() try: args = public.to_dict_obj({ "proxy_pass": "http://127.0.0.1:{}".format(self.container_port), "proxy_type": "http", "domains": self.siteName, "proxy_host": "$http_host", "remark": "Reverse proxy for container [{}]".format(get.container_name), }) # 改返回 create_result = pMod.create(args) if create_result['status'] == -1: return create_result # if not create_result['status']: # return public.returnResult(False, create_result['msg']) if hasattr(get, "privateKey") and hasattr(get, "certPem") and get.privateKey != "" and get.certPem != "": args.site_name = self.siteName args.key = get.privateKey args.csr = get.certPem # 改返回 ssl_result = pMod.set_ssl(args) # if not ssl_result['status']: if ssl_result['status'] == -1: result = public.M('sites').where("name=?", (self.siteName,)).find() args.id = result['id'] args.siteName = self.siteName args.remove_path = 1 pMod.delete(args) return ssl_result # return public.returnResult(False, ssl_result['msg']) self.sitePath = '/www/wwwroot/' + self.siteName site_pid = dp.sql('dk_sites').add( 'name,path,ps,addtime,container_id,container_name,container_port', (self.siteName, self.sitePath, 'Reverse proxy for container [{}]'.format(get.container_name), datetime.now().strftime("%Y-%m-%d %H:%M:%S"), get.container_id, get.container_name, self.container_port) ) if not site_pid: return public.return_message(-1, 0, public.lang("Add failure, database cannot be written!")) domain_id = dp.sql('dk_domain').where('id=?', (site_pid,)).find() if not domain_id: dp.sql('dk_domain').add( 'pid,name,addtime', (site_pid, self.siteName, datetime.now().strftime("%Y-%m-%d %H:%M:%S")) ) return public.return_message(0, 0, public.lang("successfully added!")) except Exception as e: result = public.M('sites').where("name=?", (self.siteName,)).find() args = public.to_dict_obj({ "id": result['id'], "siteName": self.siteName, "remove_path": 1, }) pMod.delete(args) return public.return_message(-1, 0, public.lang('Add failed with error: {}',str(e))) # 2024/1/2 下午 5:34 获取容器的反向代理信息 def get_proxy_info(self, get): ''' @name 获取容器的反向代理信息 @author wzz <2024/1/2 下午 5:34> @param "data":{"参数名":""} <数据类型> 参数描述 @return dict{"status":True/False,"msg":"提示信息"} ''' # 校验参数 try: get.validate([ Param('container_id').Require(), ], [ public.validate.trim_filter(), ]) except Exception as ex: public.print_log("error info: {}".format(ex)) return public.return_message(-1, 0, ex) try: # if not hasattr(get, 'container_id'): # return public.return_message(-1, 0, public.lang("parameter error")) self.check_table_dk_sites() container_id = get.container_id from btdockerModelV2 import containerModel as dc get.id = container_id container_info = dc.main().get_container_info(get) proxy_port = [] proxy_info = { "proxy_port": proxy_port, "ssl": False, "status": False, } # public.print_log("container_info: {}".format(container_info)) if container_info["status"] == -1: proxy_port = [] else: container_info = container_info['message'] for key, value in container_info['NetworkSettings']['Ports'].items(): if value: proxy_port.append(value[0]['HostPort']) try: proxy_info_data = dp.sql('dk_sites').where('container_id=?', (container_id,)).order('id desc').find() if not proxy_info_data: return public.return_message(0, 0, proxy_info) proxy_info = proxy_info_data site_result = public.M('sites').where("name=?", (proxy_info['name'],)).find() if not site_result: dp.sql('dk_sites').where('container_id=?', (container_id,)).delete() dp.sql('dk_domain').where('pid=?', (proxy_info['id'],)).delete() return public.return_message(0, 0, proxy_info) path = '/www/server/panel/vhost/cert/' + proxy_info['name'] conf_file = '/www/server/panel/vhost/nginx/' + proxy_info['name'] + '.conf' csrpath = path + "/fullchain.pem" keypath = path + "/privkey.pem" proxy_info["ssl"] = False if os.path.exists(csrpath) and os.path.exists(keypath): try: conf = public.readFile(conf_file) if conf: if (conf.find("ssl_certificate") != -1): proxy_info["ssl"] = True proxy_info['cert'] = public.readFile(csrpath) proxy_info['key'] = public.readFile(keypath) except: proxy_info['cert'] = "" proxy_info['key'] = "" proxy_info["status"] = True proxy_info['proxy_port'] = proxy_port except: pass return public.return_message(0, 0, proxy_info) except Exception as ex: public.print_log(traceback.format_exc()) public.print_log("error: {}".format(ex)) return public.return_message(-1, 0, ex) # 2024/1/2 下午 5:43 关闭容器的反向代理 def close_proxy(self, get): ''' @name 关闭容器的反向代理 @param "data":{"参数名":""} <数据类型> 参数描述 @return dict{"status":True/False,"msg":"提示信息"} ''' # 校验参数 try: get.validate([ Param('container_id').Require().String(), ], [ public.validate.trim_filter(), ]) except Exception as ex: public.print_log("error info: {}".format(ex)) return public.return_message(-1, 0, ex) try: # if not hasattr(get, 'container_id'): # return public.return_message(-1, 0, public.lang("parameter error!")) container_id = get.container_id proxy_info = dp.sql('dk_sites').where('container_id=?', (container_id,)).order('id desc').find() if not proxy_info: return public.return_message(-1, 0, public.lang("No reverse proxy information was detected!")) newpid = public.M('domain').where("name=? and port=?", (proxy_info["name"], 80)).getField('pid') if not newpid: return public.return_message(-1, 0, public.lang("No reverse proxy information was detected!")) # 删除站点 public.M('sites').where("name=?", (proxy_info['name'],)).delete() public.M('domain').where("name=?", (proxy_info['name'],)).delete() # 删除数据库记录 dp.sql('dk_sites').where('container_id=?', (container_id,)).delete() dp.sql('dk_domain').where('pid=?', (proxy_info['id'],)).delete() return public.return_message(0, 0, public.lang("successfully delete!")) except: return public.return_message(-1, 0, traceback.format_exc()) # 2024/1/2 下午 5:57 获取指定域名的证书内容 def get_cert_info(self, get): ''' @name 获取指定域名的证书内容 @author wzz <2024/1/2 下午 5:58> @param "data":{"参数名":""} <数据类型> 参数描述 @return dict{"status":True/False,"msg":"提示信息"} ''' try: if not hasattr(get, 'cert_name'): return public.return_message(-1, 0, public.lang("parameter error!")) cert_name = get.cert_name # 2024/1/3 下午 4:50 处理通配符域名，将*.spider.com替换成spider.com if cert_name.startswith('*.'): cert_name = cert_name.replace('*.', '') if not os.path.exists('/www/server/panel/vhost/ssl/{}'.format(cert_name)): return public.return_message(-1, 0, public.lang("Certificate does not exist!")) cert_data = {} cert_data['cert_name'] = cert_name cert_data['cert'] = public.readFile('/www/server/panel/vhost/ssl/{}/fullchain.pem'.format(cert_name)) cert_data['key'] = public.readFile('/www/server/panel/vhost/ssl/{}/privkey.pem'.format(cert_name)) cert_data['info'] = json.loads( public.readFile('/www/server/panel/vhost/ssl/{}/info.json'.format(cert_name))) return public.return_message(0, 0, cert_data) except: return public.return_message(-1, 0, traceback.format_exc()) def check_table_dk_domain(self): ''' @name 检查并创建表 @return dict{"status":True/False,"msg":"提示信息"} ''' if not dp.sql('sqlite_master').where('type=? AND name=?', ('table', 'dk_domain')).count(): dp.sql('dk_domain').execute( "CREATE TABLE `dk_domain` (`id` INTEGER PRIMARY KEY AUTOINCREMENT, `pid` INTEGER, `name` TEXT, `addtime` TEXT )", () ) def check_table_dk_sites(self): ''' @name 检查并创建表 @return dict{"status":True/False,"msg":"提示信息"} ''' if not dp.sql('sqlite_master').where('type=? AND name=?', ('table', 'dk_sites')).count(): dp.sql('dk_sites').execute( "CREATE TABLE `dk_sites` (`id` INTEGER PRIMARY KEY AUTOINCREMENT, `name` TEXT, `path` TEXT, `status` TEXT DEFAULT 1, `ps` TEXT, `addtime` TEXT, `type_id` integer DEFAULT 111, `edate` integer DEFAULT '0000-00-00', `project_type` STRING DEFAULT 'dk_proxy', `container_id` TEXT DEFAULT '', `container_name` TEXT DEFAULT '', `container_port` TEXT DEFAULT '')", () )