117 lines
4.0 KiB
Bash
Executable File
117 lines
4.0 KiB
Bash
Executable File
#!/usr/bin/env sh
|
|
# shellcheck disable=SC2034
|
|
dns_nsupdate_info='nsupdate RFC 2136 DynDNS client
|
|
Site: bind9.readthedocs.io/en/v9.18.19/manpages.html#nsupdate-dynamic-dns-update-utility
|
|
Docs: github.com/acmesh-official/acme.sh/wiki/dnsapi#dns_nsupdate
|
|
Options:
|
|
NSUPDATE_SERVER Server hostname. Default: "localhost".
|
|
NSUPDATE_SERVER_PORT Server port. Default: "53".
|
|
NSUPDATE_KEY File path to TSIG key.
|
|
NSUPDATE_ZONE Domain zone to update. Optional.
|
|
'
|
|
|
|
######## Public functions #####################
|
|
|
|
#Usage: dns_nsupdate_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
|
|
dns_nsupdate_add() {
|
|
fulldomain=$1
|
|
txtvalue=$2
|
|
NSUPDATE_SERVER="${NSUPDATE_SERVER:-$(_readaccountconf_mutable NSUPDATE_SERVER)}"
|
|
NSUPDATE_SERVER_PORT="${NSUPDATE_SERVER_PORT:-$(_readaccountconf_mutable NSUPDATE_SERVER_PORT)}"
|
|
NSUPDATE_KEY="${NSUPDATE_KEY:-$(_readaccountconf_mutable NSUPDATE_KEY)}"
|
|
NSUPDATE_ZONE="${NSUPDATE_ZONE:-$(_readaccountconf_mutable NSUPDATE_ZONE)}"
|
|
NSUPDATE_OPT="${NSUPDATE_OPT:-$(_readaccountconf_mutable NSUPDATE_OPT)}"
|
|
|
|
_checkKeyFile || return 1
|
|
|
|
# save the dns server and key to the account conf file.
|
|
_saveaccountconf_mutable NSUPDATE_SERVER "${NSUPDATE_SERVER}"
|
|
_saveaccountconf_mutable NSUPDATE_SERVER_PORT "${NSUPDATE_SERVER_PORT}"
|
|
_saveaccountconf_mutable NSUPDATE_KEY "${NSUPDATE_KEY}"
|
|
_saveaccountconf_mutable NSUPDATE_ZONE "${NSUPDATE_ZONE}"
|
|
_saveaccountconf_mutable NSUPDATE_OPT "${NSUPDATE_OPT}"
|
|
|
|
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost"
|
|
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53
|
|
[ -n "${NSUPDATE_OPT}" ] || NSUPDATE_OPT=""
|
|
|
|
_info "adding ${fulldomain}. 60 in txt \"${txtvalue}\""
|
|
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_1" ] && nsdebug="-d"
|
|
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_2" ] && nsdebug="-D"
|
|
if [ -z "${NSUPDATE_ZONE}" ]; then
|
|
#shellcheck disable=SC2086
|
|
nsupdate -k "${NSUPDATE_KEY}" $nsdebug $NSUPDATE_OPT <<EOF
|
|
server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT}
|
|
update add ${fulldomain}. 60 in txt "${txtvalue}"
|
|
send
|
|
EOF
|
|
else
|
|
#shellcheck disable=SC2086
|
|
nsupdate -k "${NSUPDATE_KEY}" $nsdebug $NSUPDATE_OPT <<EOF
|
|
server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT}
|
|
zone ${NSUPDATE_ZONE}.
|
|
update add ${fulldomain}. 60 in txt "${txtvalue}"
|
|
send
|
|
EOF
|
|
fi
|
|
if [ $? -ne 0 ]; then
|
|
_err "error updating domain"
|
|
return 1
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
|
|
#Usage: dns_nsupdate_rm _acme-challenge.www.domain.com
|
|
dns_nsupdate_rm() {
|
|
fulldomain=$1
|
|
|
|
NSUPDATE_SERVER="${NSUPDATE_SERVER:-$(_readaccountconf_mutable NSUPDATE_SERVER)}"
|
|
NSUPDATE_SERVER_PORT="${NSUPDATE_SERVER_PORT:-$(_readaccountconf_mutable NSUPDATE_SERVER_PORT)}"
|
|
NSUPDATE_KEY="${NSUPDATE_KEY:-$(_readaccountconf_mutable NSUPDATE_KEY)}"
|
|
NSUPDATE_ZONE="${NSUPDATE_ZONE:-$(_readaccountconf_mutable NSUPDATE_ZONE)}"
|
|
NSUPDATE_OPT="${NSUPDATE_OPT:-$(_readaccountconf_mutable NSUPDATE_OPT)}"
|
|
|
|
_checkKeyFile || return 1
|
|
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost"
|
|
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53
|
|
_info "removing ${fulldomain}. txt"
|
|
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_1" ] && nsdebug="-d"
|
|
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_2" ] && nsdebug="-D"
|
|
if [ -z "${NSUPDATE_ZONE}" ]; then
|
|
#shellcheck disable=SC2086
|
|
nsupdate -k "${NSUPDATE_KEY}" $nsdebug $NSUPDATE_OPT <<EOF
|
|
server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT}
|
|
update delete ${fulldomain}. txt
|
|
send
|
|
EOF
|
|
else
|
|
#shellcheck disable=SC2086
|
|
nsupdate -k "${NSUPDATE_KEY}" $nsdebug $NSUPDATE_OPT <<EOF
|
|
server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT}
|
|
zone ${NSUPDATE_ZONE}.
|
|
update delete ${fulldomain}. txt
|
|
send
|
|
EOF
|
|
fi
|
|
if [ $? -ne 0 ]; then
|
|
_err "error updating domain"
|
|
return 1
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
|
|
#################### Private functions below ##################################
|
|
|
|
_checkKeyFile() {
|
|
if [ -z "${NSUPDATE_KEY}" ]; then
|
|
_err "you must specify a path to the nsupdate key file"
|
|
return 1
|
|
fi
|
|
if [ ! -r "${NSUPDATE_KEY}" ]; then
|
|
_err "key ${NSUPDATE_KEY} is unreadable"
|
|
return 1
|
|
fi
|
|
}
|