307 lines
14 KiB
Python
307 lines
14 KiB
Python
# coding: utf-8
|
|
# -------------------------------------------------------------------
|
|
# YakPanel
|
|
# -------------------------------------------------------------------
|
|
# Copyright (c) 2015-2099 YakPanel(www.yakpanel.com) All rights reserved.
|
|
# -------------------------------------------------------------------
|
|
# Author: wzz <wzz@yakpanel.com>
|
|
# -------------------------------------------------------------------
|
|
import json
|
|
import os
|
|
import traceback
|
|
from datetime import datetime
|
|
|
|
import public
|
|
from btdockerModelV2 import dk_public as dp
|
|
from btdockerModelV2.dockerBase import dockerBase
|
|
from public.validate import Param
|
|
class main(dockerBase):
|
|
|
|
# 2023/12/27 下午 2:56 创建容器反向代理
|
|
def create_proxy(self, get):
|
|
'''
|
|
@name 创建容器反向代理
|
|
@author wzz <2023/12/27 下午 2:57>
|
|
@param "data":{"参数名":""} <数据类型> 参数描述
|
|
@return dict{"status":True/False,"msg":"提示信息"}
|
|
'''
|
|
|
|
# 校验参数
|
|
try:
|
|
get.validate([
|
|
Param('domain').Require(),
|
|
Param('container_port').Require(),
|
|
Param('container_name').Require(),
|
|
Param('container_id').Require(),
|
|
Param('privateKey').Require(),
|
|
Param('certPem').Require(),
|
|
], [
|
|
public.validate.trim_filter(),
|
|
])
|
|
except Exception as ex:
|
|
public.print_log("error info: {}".format(ex))
|
|
return public.return_message(-1, 0, ex)
|
|
|
|
# try:
|
|
if not (os.path.exists('/etc/init.d/nginx') or os.path.exists('/etc/init.d/httpd')):
|
|
return public.return_message(-1, 0, public.lang("nginx or apache server was not detected, please install one first!"))
|
|
|
|
# if not hasattr(get, 'domain'):
|
|
# return public.return_message(-1, 0, public.lang("parameter error"))
|
|
#
|
|
# if not hasattr(get, 'container_port'):
|
|
# return public.return_message(-1, 0, public.lang("parameter error"))
|
|
|
|
self.siteName = get.domain.strip()
|
|
self.check_table_dk_sites()
|
|
if dp.sql('dk_sites').where('container_id=?', (get.container_id,)).order('id desc').find():
|
|
self.close_proxy(get)
|
|
# 2024/2/23 下午 12:05 如果其他地方有这个域名，则禁止添加
|
|
newpid = public.M('domain').where("name=? and port=?", (self.siteName, 80)).getField('pid')
|
|
if newpid:
|
|
result = public.M('sites').where("id=?", (newpid,)).find()
|
|
if result:
|
|
return public.return_message(-1, 0, public.lang("Project Type [{}] Existing Domain: {}", result['project_type'],self.siteName))
|
|
|
|
self.container_port = get.container_port
|
|
if not dp.check_socket(self.container_port):
|
|
return public.return_message(-1, 0, public.lang("Server port [ {}] is not used, please enter the port in use to reverse!", self.container_port))
|
|
# todo mod的反向代理
|
|
from mod.project.proxy.comMod import main as proxyMod
|
|
pMod = proxyMod()
|
|
|
|
try:
|
|
args = public.to_dict_obj({
|
|
"proxy_pass": "http://127.0.0.1:{}".format(self.container_port),
|
|
"proxy_type": "http",
|
|
"domains": self.siteName,
|
|
"proxy_host": "$http_host",
|
|
"remark": "Reverse proxy for container [{}]".format(get.container_name),
|
|
})
|
|
# 改返回
|
|
create_result = pMod.create(args)
|
|
if create_result['status'] == -1:
|
|
return create_result
|
|
# if not create_result['status']:
|
|
# return public.returnResult(False, create_result['msg'])
|
|
|
|
if hasattr(get, "privateKey") and hasattr(get, "certPem") and get.privateKey != "" and get.certPem != "":
|
|
args.site_name = self.siteName
|
|
args.key = get.privateKey
|
|
args.csr = get.certPem
|
|
# 改返回
|
|
ssl_result = pMod.set_ssl(args)
|
|
# if not ssl_result['status']:
|
|
if ssl_result['status'] == -1:
|
|
result = public.M('sites').where("name=?", (self.siteName,)).find()
|
|
args.id = result['id']
|
|
args.siteName = self.siteName
|
|
args.remove_path = 1
|
|
pMod.delete(args)
|
|
return ssl_result
|
|
# return public.returnResult(False, ssl_result['msg'])
|
|
|
|
self.sitePath = '/www/wwwroot/' + self.siteName
|
|
|
|
site_pid = dp.sql('dk_sites').add(
|
|
'name,path,ps,addtime,container_id,container_name,container_port',
|
|
(self.siteName, self.sitePath, 'Reverse proxy for container [{}]'.format(get.container_name),
|
|
datetime.now().strftime("%Y-%m-%d %H:%M:%S"), get.container_id, get.container_name, self.container_port)
|
|
)
|
|
if not site_pid:
|
|
return public.return_message(-1, 0, public.lang("Add failure, database cannot be written!"))
|
|
|
|
domain_id = dp.sql('dk_domain').where('id=?', (site_pid,)).find()
|
|
if not domain_id:
|
|
dp.sql('dk_domain').add(
|
|
'pid,name,addtime',
|
|
(site_pid, self.siteName, datetime.now().strftime("%Y-%m-%d %H:%M:%S"))
|
|
)
|
|
|
|
return public.return_message(0, 0, public.lang("successfully added!"))
|
|
except Exception as e:
|
|
result = public.M('sites').where("name=?", (self.siteName,)).find()
|
|
args = public.to_dict_obj({
|
|
"id": result['id'],
|
|
"siteName": self.siteName,
|
|
"remove_path": 1,
|
|
})
|
|
pMod.delete(args)
|
|
return public.return_message(-1, 0, public.lang('Add failed with error: {}',str(e)))
|
|
|
|
# 2024/1/2 下午 5:34 获取容器的反向代理信息
|
|
def get_proxy_info(self, get):
|
|
'''
|
|
@name 获取容器的反向代理信息
|
|
@author wzz <2024/1/2 下午 5:34>
|
|
@param "data":{"参数名":""} <数据类型> 参数描述
|
|
@return dict{"status":True/False,"msg":"提示信息"}
|
|
'''
|
|
# 校验参数
|
|
try:
|
|
get.validate([
|
|
Param('container_id').Require(),
|
|
|
|
], [
|
|
public.validate.trim_filter(),
|
|
])
|
|
except Exception as ex:
|
|
public.print_log("error info: {}".format(ex))
|
|
return public.return_message(-1, 0, ex)
|
|
try:
|
|
# if not hasattr(get, 'container_id'):
|
|
# return public.return_message(-1, 0, public.lang("parameter error"))
|
|
self.check_table_dk_sites()
|
|
container_id = get.container_id
|
|
from btdockerModelV2 import containerModel as dc
|
|
get.id = container_id
|
|
container_info = dc.main().get_container_info(get)
|
|
proxy_port = []
|
|
proxy_info = {
|
|
"proxy_port": proxy_port,
|
|
"ssl": False,
|
|
"status": False,
|
|
}
|
|
# public.print_log("container_info: {}".format(container_info))
|
|
|
|
if container_info["status"] == -1:
|
|
proxy_port = []
|
|
else:
|
|
container_info = container_info['message']
|
|
for key, value in container_info['NetworkSettings']['Ports'].items():
|
|
|
|
if value:
|
|
proxy_port.append(value[0]['HostPort'])
|
|
|
|
try:
|
|
proxy_info_data = dp.sql('dk_sites').where('container_id=?', (container_id,)).order('id desc').find()
|
|
if not proxy_info_data:
|
|
return public.return_message(0, 0, proxy_info)
|
|
|
|
proxy_info = proxy_info_data
|
|
|
|
site_result = public.M('sites').where("name=?", (proxy_info['name'],)).find()
|
|
if not site_result:
|
|
dp.sql('dk_sites').where('container_id=?', (container_id,)).delete()
|
|
dp.sql('dk_domain').where('pid=?', (proxy_info['id'],)).delete()
|
|
return public.return_message(0, 0, proxy_info)
|
|
|
|
path = '/www/server/panel/vhost/cert/' + proxy_info['name']
|
|
conf_file = '/www/server/panel/vhost/nginx/' + proxy_info['name'] + '.conf'
|
|
csrpath = path + "/fullchain.pem"
|
|
keypath = path + "/privkey.pem"
|
|
proxy_info["ssl"] = False
|
|
if os.path.exists(csrpath) and os.path.exists(keypath):
|
|
try:
|
|
conf = public.readFile(conf_file)
|
|
if conf:
|
|
if (conf.find("ssl_certificate") != -1):
|
|
proxy_info["ssl"] = True
|
|
proxy_info['cert'] = public.readFile(csrpath)
|
|
proxy_info['key'] = public.readFile(keypath)
|
|
except:
|
|
proxy_info['cert'] = ""
|
|
proxy_info['key'] = ""
|
|
|
|
proxy_info["status"] = True
|
|
proxy_info['proxy_port'] = proxy_port
|
|
except:
|
|
pass
|
|
|
|
return public.return_message(0, 0, proxy_info)
|
|
except Exception as ex:
|
|
public.print_log(traceback.format_exc())
|
|
public.print_log("error: {}".format(ex))
|
|
return public.return_message(-1, 0, ex)
|
|
|
|
# 2024/1/2 下午 5:43 关闭容器的反向代理
|
|
def close_proxy(self, get):
|
|
'''
|
|
@name 关闭容器的反向代理
|
|
@param "data":{"参数名":""} <数据类型> 参数描述
|
|
@return dict{"status":True/False,"msg":"提示信息"}
|
|
'''
|
|
|
|
# 校验参数
|
|
try:
|
|
get.validate([
|
|
Param('container_id').Require().String(),
|
|
], [
|
|
public.validate.trim_filter(),
|
|
])
|
|
except Exception as ex:
|
|
public.print_log("error info: {}".format(ex))
|
|
return public.return_message(-1, 0, ex)
|
|
try:
|
|
# if not hasattr(get, 'container_id'):
|
|
# return public.return_message(-1, 0, public.lang("parameter error!"))
|
|
|
|
container_id = get.container_id
|
|
proxy_info = dp.sql('dk_sites').where('container_id=?', (container_id,)).order('id desc').find()
|
|
|
|
if not proxy_info:
|
|
return public.return_message(-1, 0, public.lang("No reverse proxy information was detected!"))
|
|
|
|
newpid = public.M('domain').where("name=? and port=?", (proxy_info["name"], 80)).getField('pid')
|
|
if not newpid:
|
|
return public.return_message(-1, 0, public.lang("No reverse proxy information was detected!"))
|
|
|
|
# 删除站点
|
|
public.M('sites').where("name=?", (proxy_info['name'],)).delete()
|
|
public.M('domain').where("name=?", (proxy_info['name'],)).delete()
|
|
|
|
# 删除数据库记录
|
|
dp.sql('dk_sites').where('container_id=?', (container_id,)).delete()
|
|
dp.sql('dk_domain').where('pid=?', (proxy_info['id'],)).delete()
|
|
|
|
return public.return_message(0, 0, public.lang("successfully delete!"))
|
|
except:
|
|
return public.return_message(-1, 0, traceback.format_exc())
|
|
|
|
# 2024/1/2 下午 5:57 获取指定域名的证书内容
|
|
def get_cert_info(self, get):
|
|
'''
|
|
@name 获取指定域名的证书内容
|
|
@author wzz <2024/1/2 下午 5:58>
|
|
@param "data":{"参数名":""} <数据类型> 参数描述
|
|
@return dict{"status":True/False,"msg":"提示信息"}
|
|
'''
|
|
try:
|
|
if not hasattr(get, 'cert_name'): return public.return_message(-1, 0, public.lang("parameter error!"))
|
|
cert_name = get.cert_name
|
|
# 2024/1/3 下午 4:50 处理通配符域名，将*.spider.com替换成spider.com
|
|
if cert_name.startswith('*.'):
|
|
cert_name = cert_name.replace('*.', '')
|
|
if not os.path.exists('/www/server/panel/vhost/ssl/{}'.format(cert_name)):
|
|
return public.return_message(-1, 0, public.lang("Certificate does not exist!"))
|
|
cert_data = {}
|
|
cert_data['cert_name'] = cert_name
|
|
cert_data['cert'] = public.readFile('/www/server/panel/vhost/ssl/{}/fullchain.pem'.format(cert_name))
|
|
cert_data['key'] = public.readFile('/www/server/panel/vhost/ssl/{}/privkey.pem'.format(cert_name))
|
|
cert_data['info'] = json.loads(
|
|
public.readFile('/www/server/panel/vhost/ssl/{}/info.json'.format(cert_name)))
|
|
return public.return_message(0, 0, cert_data)
|
|
except:
|
|
return public.return_message(-1, 0, traceback.format_exc())
|
|
|
|
def check_table_dk_domain(self):
|
|
'''
|
|
@name 检查并创建表
|
|
@return dict{"status":True/False,"msg":"提示信息"}
|
|
'''
|
|
if not dp.sql('sqlite_master').where('type=? AND name=?', ('table', 'dk_domain')).count():
|
|
dp.sql('dk_domain').execute(
|
|
"CREATE TABLE `dk_domain` (`id` INTEGER PRIMARY KEY AUTOINCREMENT, `pid` INTEGER, `name` TEXT, `addtime` TEXT )",
|
|
()
|
|
)
|
|
|
|
def check_table_dk_sites(self):
|
|
'''
|
|
@name 检查并创建表
|
|
@return dict{"status":True/False,"msg":"提示信息"}
|
|
'''
|
|
if not dp.sql('sqlite_master').where('type=? AND name=?', ('table', 'dk_sites')).count():
|
|
dp.sql('dk_sites').execute(
|
|
"CREATE TABLE `dk_sites` (`id` INTEGER PRIMARY KEY AUTOINCREMENT, `name` TEXT, `path` TEXT, `status` TEXT DEFAULT 1, `ps` TEXT, `addtime` TEXT, `type_id` integer DEFAULT 111, `edate` integer DEFAULT '0000-00-00', `project_type` STRING DEFAULT 'dk_proxy', `container_id` TEXT DEFAULT '', `container_name` TEXT DEFAULT '', `container_port` TEXT DEFAULT '')",
|
|
()
|
|
) |