You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
42 lines
2.1 KiB
42 lines
2.1 KiB
#!/usr/bin/env bash
|
|
# need to add your email address and API key to cloudflare below or set as env variables
|
|
email=${CF_EMAIL:-''}
|
|
key=${CF_KEY:-''}
|
|
|
|
fulldomain="${1:?Need full domain name as first parameter}"
|
|
token="${2:?Need Let’s Encrypt challenge token as second parameter}"
|
|
API='https://api.cloudflare.com/client/v4/zones'
|
|
PARAMS=( -H "X-Auth-Email: $email" -H "X-Auth-Key: $key" -H 'Content-Type: application/json' )
|
|
|
|
# get a list of all domain names from cloudflare
|
|
# If you have a lot, you may need add "&page=1&per_page=1000" and/or "&status=active"
|
|
resp=$(curl --silent "${PARAMS[@]}" -X GET "$API")
|
|
re='"result":\[(([^][]*\[[^][]*])*[^][]*)]' # find result section
|
|
[[ "${resp// }" =~ $re ]] && resp="${BASH_REMATCH[1]}"
|
|
while [[ "$resp" ]]; do # iterate through domains returned
|
|
re='[^}{]*\{(([^}{]*\{[^}{]*})*[^}{]*)}(.*)'
|
|
[[ "$resp" =~ $re ]]; first="${BASH_REMATCH[1]}"; resp="${BASH_REMATCH[3]}"
|
|
|
|
# remove subsections - leave only domain level
|
|
while [[ "$first" =~ (.*)[\[\{][^]\{\}[]*[\]\}](.*) ]]; do first="${BASH_REMATCH[1]}${BASH_REMATCH[2]}"; done
|
|
re='"name":"([^"]*)"'; [[ "$first" =~ $re ]] && domains=( "${domains[@]}" "${BASH_REMATCH[1]}" )
|
|
re='"id":"([^"]*)"'; [[ "$first" =~ $re ]] && ids=( "${ids[@]}" "${BASH_REMATCH[1]}" )
|
|
done
|
|
|
|
# select right cloudflare domain (longest one)
|
|
domain=$fulldomain.
|
|
# shellcheck disable=SC2076
|
|
while [[ "$domain" && ! "${domains[@]/#/@}" == *"@${domain%?}"* ]]; do domain=${domain#*.}; done
|
|
domain=${domain%?}
|
|
[ -z "$domain" ] && { echo 'domain name not found on your cloudflare account'; exit 1; }
|
|
|
|
for i in "${!domains[@]}"; do [[ ${domains[i]} == "$domain" ]] && break; done
|
|
domain_id=${ids[i]}
|
|
|
|
resp=$(curl --silent "${PARAMS[@]}" -X POST "$API/$domain_id/dns_records" \
|
|
--data "{\"type\":\"TXT\",\"name\":\"_acme-challenge.${fulldomain%.$domain}\",\"content\":\"$token\",\"ttl\":300}")
|
|
# code 81057 = The record already exists.
|
|
if [[ "${resp// }" == *'"success":false'* && ! "${resp// }" == *'"code":81057[^0-9]'* ]]; then
|
|
re='"message":"([^"]+)"'; [[ "$resp" =~ $re ]]
|
|
echo "Error: DNS challenge not added: ${BASH_REMATCH[1]:-unknown error}"; exit 2
|
|
fi
|