335 lines
10 KiB
Plaintext
335 lines
10 KiB
Plaintext
|
#!/bin/sh
|
||
|
|
# /usr/libexec/rpcd/vhost-manager
|
||
|
|
# RPCD backend for VHost Manager module
|
||
|
|
# Provides ubus interface: luci.vhost-manager
|
||
|
|
|
||
|
|
. /lib/functions.sh
|
||
|
|
. /usr/share/libubox/jshn.sh
|
||
|
|
|
||
|
|
# Configuration
|
||
|
|
UCI_CONFIG="vhost_manager"
|
||
|
|
NGINX_VHOSTS_DIR="/etc/nginx/conf.d"
|
||
|
|
ACME_DIR="/etc/acme"
|
||
|
|
|
||
|
|
# Helper: Check if nginx is running
|
||
|
|
nginx_running() {
|
||
|
|
pgrep -x nginx > /dev/null 2>&1
|
||
|
|
}
|
||
|
|
|
||
|
|
# Helper: Get nginx status
|
||
|
|
get_nginx_status() {
|
||
|
|
if nginx_running; then
|
||
|
|
echo "running"
|
||
|
|
else
|
||
|
|
echo "stopped"
|
||
|
|
fi
|
||
|
|
}
|
||
|
|
|
||
|
|
# Helper: Count vhosts
|
||
|
|
count_vhosts() {
|
||
|
|
if [ -d "$NGINX_VHOSTS_DIR" ]; then
|
||
|
|
ls -1 "$NGINX_VHOSTS_DIR"/*.conf 2>/dev/null | wc -l
|
||
|
|
else
|
||
|
|
echo "0"
|
||
|
|
fi
|
||
|
|
}
|
||
|
|
|
||
|
|
# Helper: List vhosts
|
||
|
|
list_vhosts() {
|
||
|
|
json_add_array "vhosts"
|
||
|
|
|
||
|
|
if [ -d "$NGINX_VHOSTS_DIR" ]; then
|
||
|
|
for conf in "$NGINX_VHOSTS_DIR"/*.conf; do
|
||
|
|
[ -f "$conf" ] || continue
|
||
|
|
|
||
|
|
# Extract server_name from config
|
||
|
|
SERVER_NAME=$(grep -m1 "server_name" "$conf" | awk '{print $2}' | tr -d ';')
|
||
|
|
PROXY_PASS=$(grep -m1 "proxy_pass" "$conf" | awk '{print $2}' | tr -d ';')
|
||
|
|
SSL_ENABLED="false"
|
||
|
|
|
||
|
|
if grep -q "ssl_certificate" "$conf"; then
|
||
|
|
SSL_ENABLED="true"
|
||
|
|
fi
|
||
|
|
|
||
|
|
json_add_object ""
|
||
|
|
json_add_string "name" "$(basename "$conf" .conf)"
|
||
|
|
json_add_string "domain" "$SERVER_NAME"
|
||
|
|
json_add_string "backend" "$PROXY_PASS"
|
||
|
|
json_add_boolean "ssl" "$SSL_ENABLED"
|
||
|
|
json_add_boolean "enabled" 1
|
||
|
|
json_close_object
|
||
|
|
done
|
||
|
|
fi
|
||
|
|
|
||
|
|
json_close_array
|
||
|
|
}
|
||
|
|
|
||
|
|
# Helper: Get SSL certificates
|
||
|
|
list_certificates() {
|
||
|
|
json_add_array "certificates"
|
||
|
|
|
||
|
|
if [ -d "$ACME_DIR" ]; then
|
||
|
|
for cert_dir in "$ACME_DIR"/*/; do
|
||
|
|
[ -d "$cert_dir" ] || continue
|
||
|
|
|
||
|
|
DOMAIN=$(basename "$cert_dir")
|
||
|
|
CERT_FILE="$cert_dir/fullchain.cer"
|
||
|
|
|
||
|
|
if [ -f "$CERT_FILE" ]; then
|
||
|
|
# Get expiry date
|
||
|
|
EXPIRY=$(openssl x509 -enddate -noout -in "$CERT_FILE" 2>/dev/null | cut -d= -f2)
|
||
|
|
|
||
|
|
json_add_object ""
|
||
|
|
json_add_string "domain" "$DOMAIN"
|
||
|
|
json_add_string "expiry" "$EXPIRY"
|
||
|
|
json_add_boolean "valid" 1
|
||
|
|
json_close_object
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
fi
|
||
|
|
|
||
|
|
json_close_array
|
||
|
|
}
|
||
|
|
|
||
|
|
# Initialize JSON
|
||
|
|
json_init
|
||
|
|
|
||
|
|
case "$1" in
|
||
|
|
list)
|
||
|
|
# List available methods
|
||
|
|
json_add_object "status"
|
||
|
|
json_close_object
|
||
|
|
|
||
|
|
json_add_object "get_vhosts"
|
||
|
|
json_close_object
|
||
|
|
|
||
|
|
json_add_object "get_vhost"
|
||
|
|
json_add_string "name" "string"
|
||
|
|
json_close_object
|
||
|
|
|
||
|
|
json_add_object "add_vhost"
|
||
|
|
json_add_string "domain" "string"
|
||
|
|
json_add_string "backend" "string"
|
||
|
|
json_add_boolean "ssl" false
|
||
|
|
json_close_object
|
||
|
|
|
||
|
|
json_add_object "delete_vhost"
|
||
|
|
json_add_string "name" "string"
|
||
|
|
json_close_object
|
||
|
|
|
||
|
|
json_add_object "get_certificates"
|
||
|
|
json_close_object
|
||
|
|
|
||
|
|
json_add_object "request_certificate"
|
||
|
|
json_add_string "domain" "string"
|
||
|
|
json_close_object
|
||
|
|
|
||
|
|
json_add_object "reload_nginx"
|
||
|
|
json_close_object
|
||
|
|
|
||
|
|
json_add_object "test_config"
|
||
|
|
json_close_object
|
||
|
|
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
|
||
|
|
call)
|
||
|
|
case "$2" in
|
||
|
|
status)
|
||
|
|
# Return module status
|
||
|
|
json_add_string "module" "vhost-manager"
|
||
|
|
json_add_string "version" "2.0.0"
|
||
|
|
json_add_string "nginx_status" "$(get_nginx_status)"
|
||
|
|
json_add_boolean "nginx_running" $(nginx_running && echo 1 || echo 0)
|
||
|
|
json_add_int "vhost_count" "$(count_vhosts)"
|
||
|
|
json_add_string "config_dir" "$NGINX_VHOSTS_DIR"
|
||
|
|
json_add_string "acme_dir" "$ACME_DIR"
|
||
|
|
|
||
|
|
# Check nginx version
|
||
|
|
if command -v nginx > /dev/null 2>&1; then
|
||
|
|
NGINX_VERSION=$(nginx -v 2>&1 | cut -d/ -f2)
|
||
|
|
json_add_string "nginx_version" "$NGINX_VERSION"
|
||
|
|
fi
|
||
|
|
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
|
||
|
|
get_vhosts)
|
||
|
|
# Return list of vhosts
|
||
|
|
list_vhosts
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
|
||
|
|
get_vhost)
|
||
|
|
# Get single vhost details
|
||
|
|
read -r input
|
||
|
|
json_load "$input"
|
||
|
|
json_get_var vhost_name name
|
||
|
|
|
||
|
|
CONF_FILE="$NGINX_VHOSTS_DIR/${vhost_name}.conf"
|
||
|
|
|
||
|
|
if [ -f "$CONF_FILE" ]; then
|
||
|
|
json_add_boolean "found" 1
|
||
|
|
json_add_string "name" "$vhost_name"
|
||
|
|
json_add_string "config" "$(cat "$CONF_FILE")"
|
||
|
|
else
|
||
|
|
json_add_boolean "found" 0
|
||
|
|
json_add_string "error" "VHost not found"
|
||
|
|
fi
|
||
|
|
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
|
||
|
|
add_vhost)
|
||
|
|
# Add new vhost
|
||
|
|
read -r input
|
||
|
|
json_load "$input"
|
||
|
|
json_get_var domain domain
|
||
|
|
json_get_var backend backend
|
||
|
|
json_get_var ssl ssl
|
||
|
|
|
||
|
|
# Validate
|
||
|
|
if [ -z "$domain" ] || [ -z "$backend" ]; then
|
||
|
|
json_init
|
||
|
|
json_add_boolean "success" 0
|
||
|
|
json_add_string "error" "Domain and backend are required"
|
||
|
|
json_dump
|
||
|
|
exit 0
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Create config
|
||
|
|
VHOST_NAME=$(echo "$domain" | tr '.' '-')
|
||
|
|
CONF_FILE="$NGINX_VHOSTS_DIR/${VHOST_NAME}.conf"
|
||
|
|
|
||
|
|
mkdir -p "$NGINX_VHOSTS_DIR"
|
||
|
|
|
||
|
|
cat > "$CONF_FILE" << NGINX_EOF
|
||
|
|
server {
|
||
|
|
listen 80;
|
||
|
|
listen [::]:80;
|
||
|
|
server_name $domain;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
proxy_pass $backend;
|
||
|
|
proxy_http_version 1.1;
|
||
|
|
proxy_set_header Host \$host;
|
||
|
|
proxy_set_header X-Real-IP \$remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||
|
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
||
|
|
proxy_set_header Upgrade \$http_upgrade;
|
||
|
|
proxy_set_header Connection "upgrade";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
NGINX_EOF
|
||
|
|
|
||
|
|
json_init
|
||
|
|
json_add_boolean "success" 1
|
||
|
|
json_add_string "message" "VHost created"
|
||
|
|
json_add_string "config_file" "$CONF_FILE"
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
|
||
|
|
delete_vhost)
|
||
|
|
# Delete vhost
|
||
|
|
read -r input
|
||
|
|
json_load "$input"
|
||
|
|
json_get_var vhost_name name
|
||
|
|
|
||
|
|
CONF_FILE="$NGINX_VHOSTS_DIR/${vhost_name}.conf"
|
||
|
|
|
||
|
|
if [ -f "$CONF_FILE" ]; then
|
||
|
|
rm -f "$CONF_FILE"
|
||
|
|
json_init
|
||
|
|
json_add_boolean "success" 1
|
||
|
|
json_add_string "message" "VHost deleted"
|
||
|
|
else
|
||
|
|
json_init
|
||
|
|
json_add_boolean "success" 0
|
||
|
|
json_add_string "error" "VHost not found"
|
||
|
|
fi
|
||
|
|
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
|
||
|
|
get_certificates)
|
||
|
|
# List SSL certificates
|
||
|
|
list_certificates
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
|
||
|
|
request_certificate)
|
||
|
|
# Request Let's Encrypt certificate
|
||
|
|
read -r input
|
||
|
|
json_load "$input"
|
||
|
|
json_get_var domain domain
|
||
|
|
|
||
|
|
if [ -z "$domain" ]; then
|
||
|
|
json_init
|
||
|
|
json_add_boolean "success" 0
|
||
|
|
json_add_string "error" "Domain is required"
|
||
|
|
json_dump
|
||
|
|
exit 0
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Check if acme.sh is available
|
||
|
|
if command -v acme.sh > /dev/null 2>&1; then
|
||
|
|
# Request certificate (async - just start the process)
|
||
|
|
acme.sh --issue -d "$domain" --webroot /www --keylength ec-256 &
|
||
|
|
|
||
|
|
json_init
|
||
|
|
json_add_boolean "success" 1
|
||
|
|
json_add_string "message" "Certificate request started"
|
||
|
|
json_add_string "domain" "$domain"
|
||
|
|
else
|
||
|
|
json_init
|
||
|
|
json_add_boolean "success" 0
|
||
|
|
json_add_string "error" "acme.sh not installed"
|
||
|
|
fi
|
||
|
|
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
|
||
|
|
reload_nginx)
|
||
|
|
# Reload nginx configuration
|
||
|
|
if nginx -t > /dev/null 2>&1; then
|
||
|
|
/etc/init.d/nginx reload
|
||
|
|
json_add_boolean "success" 1
|
||
|
|
json_add_string "message" "Nginx reloaded"
|
||
|
|
else
|
||
|
|
json_add_boolean "success" 0
|
||
|
|
json_add_string "error" "Configuration test failed"
|
||
|
|
json_add_string "details" "$(nginx -t 2>&1)"
|
||
|
|
fi
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
|
||
|
|
test_config)
|
||
|
|
# Test nginx configuration
|
||
|
|
TEST_OUTPUT=$(nginx -t 2>&1)
|
||
|
|
TEST_RESULT=$?
|
||
|
|
|
||
|
|
if [ $TEST_RESULT -eq 0 ]; then
|
||
|
|
json_add_boolean "valid" 1
|
||
|
|
json_add_string "message" "Configuration OK"
|
||
|
|
else
|
||
|
|
json_add_boolean "valid" 0
|
||
|
|
json_add_string "error" "$TEST_OUTPUT"
|
||
|
|
fi
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
|
||
|
|
*)
|
||
|
|
# Unknown method
|
||
|
|
json_add_int "error" -32601
|
||
|
|
json_add_string "message" "Method not found: $2"
|
||
|
|
json_dump
|
||
|
|
;;
|
||
|
|
esac
|
||
|
|
;;
|
||
|
|
|
||
|
|
*)
|
||
|
|
echo "Usage: $0 {list|call}"
|
||
|
|
exit 1
|
||
|
|
;;
|
||
|
|
esac
|