aaPanel/class_v2/btdockerModelV2/proxyModel.py

# coding: utf-8
# -------------------------------------------------------------------
# aaPanel
# -------------------------------------------------------------------
# Copyright (c) 2015-2099 aaPanel(www.aapanel.com) All rights reserved.
# -------------------------------------------------------------------
# Author: wzz <wzz@aapanel.com>
# -------------------------------------------------------------------
import json
import os
import traceback
from datetime import datetime

import public
from btdockerModelV2 import dk_public as dp
from btdockerModelV2.dockerBase import dockerBase
from public.validate import Param
class main(dockerBase):

    # 2023/12/27 下午 2:56 创建容器反向代理
    def create_proxy(self, get):
        '''
            @name 创建容器反向代理
            @author wzz <2023/12/27 下午 2:57>
            @param "data":{"参数名":""} <数据类型> 参数描述
            @return dict{"status":True/False,"msg":"提示信息"}
        '''

        # 校验参数
        try:
            get.validate([
                Param('domain').Require(),
                Param('container_port').Require(),
                Param('container_name').Require(),
                Param('container_id').Require(),
                Param('privateKey').Require(),
                Param('certPem').Require(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)

        # try:
        if not (os.path.exists('/etc/init.d/nginx') or os.path.exists('/etc/init.d/httpd')):
            return public.return_message(-1, 0, public.lang("nginx or apache server was not detected, please install one first!"))

        # if not hasattr(get, 'domain'):
        #     return public.return_message(-1, 0, public.lang("parameter error"))
        #
        # if not hasattr(get, 'container_port'):
        #     return public.return_message(-1, 0, public.lang("parameter error"))

        self.siteName = get.domain.strip()
        self.check_table_dk_sites()
        if dp.sql('dk_sites').where('container_id=?', (get.container_id,)).order('id desc').find():
            self.close_proxy(get)
        # 2024/2/23 下午 12:05 如果其他地方有这个域名，则禁止添加
        newpid = public.M('domain').where("name=? and port=?", (self.siteName, 80)).getField('pid')
        if newpid:
            result = public.M('sites').where("id=?", (newpid,)).find()
            if result:
                return public.return_message(-1, 0, public.lang("Project Type [{}] Existing Domain: {}", result['project_type'],self.siteName))

        self.container_port = get.container_port
        if not dp.check_socket(self.container_port):
            return public.return_message(-1, 0, public.lang("Server port [ {}] is not used, please enter the port in use to reverse!", self.container_port))
        # todo mod的反向代理
        from mod.project.proxy.comMod import main as proxyMod
        pMod = proxyMod()

        try:
            args = public.to_dict_obj({
                "proxy_pass": "http://127.0.0.1:{}".format(self.container_port),
                "proxy_type": "http",
                "domains": self.siteName,
                "proxy_host": "$http_host",
                "remark": "Reverse proxy for container [{}]".format(get.container_name),
            })
            # 改返回
            create_result = pMod.create(args)
            if create_result['status'] == -1:
                return create_result
            # if not create_result['status']:
            #     return public.returnResult(False, create_result['msg'])

            if hasattr(get, "privateKey") and hasattr(get, "certPem") and get.privateKey != "" and get.certPem != "":
                args.site_name = self.siteName
                args.key = get.privateKey
                args.csr = get.certPem
                # 改返回
                ssl_result = pMod.set_ssl(args)
                # if not ssl_result['status']:
                if ssl_result['status'] == -1:
                    result = public.M('sites').where("name=?", (self.siteName,)).find()
                    args.id = result['id']
                    args.siteName = self.siteName
                    args.remove_path = 1
                    pMod.delete(args)
                    return ssl_result
                    # return public.returnResult(False, ssl_result['msg'])

            self.sitePath = '/www/wwwroot/' + self.siteName

            site_pid = dp.sql('dk_sites').add(
                'name,path,ps,addtime,container_id,container_name,container_port',
                (self.siteName, self.sitePath, 'Reverse proxy for container [{}]'.format(get.container_name),
                 datetime.now().strftime("%Y-%m-%d %H:%M:%S"), get.container_id, get.container_name, self.container_port)
            )
            if not site_pid:
                return public.return_message(-1, 0, public.lang("Add failure, database cannot be written!"))

            domain_id = dp.sql('dk_domain').where('id=?', (site_pid,)).find()
            if not domain_id:
                dp.sql('dk_domain').add(
                    'pid,name,addtime',
                    (site_pid, self.siteName, datetime.now().strftime("%Y-%m-%d %H:%M:%S"))
                )

            return public.return_message(0, 0, public.lang("successfully added!"))
        except Exception as e:
            result = public.M('sites').where("name=?", (self.siteName,)).find()
            args = public.to_dict_obj({
                "id": result['id'],
                "siteName": self.siteName,
                "remove_path": 1,
            })
            pMod.delete(args)
            return public.return_message(-1, 0, public.lang('Add failed with error: {}',str(e)))

    # 2024/1/2 下午 5:34 获取容器的反向代理信息
    def get_proxy_info(self, get):
        '''
            @name 获取容器的反向代理信息
            @author wzz <2024/1/2 下午 5:34>
            @param "data":{"参数名":""} <数据类型> 参数描述
            @return dict{"status":True/False,"msg":"提示信息"}
        '''
        # 校验参数
        try:
            get.validate([
                Param('container_id').Require(),

            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)
        try:
        # if not hasattr(get, 'container_id'):
        #     return public.return_message(-1, 0, public.lang("parameter error"))
            self.check_table_dk_sites()
            container_id = get.container_id
            from btdockerModelV2 import containerModel as dc
            get.id = container_id
            container_info = dc.main().get_container_info(get)
            proxy_port = []
            proxy_info = {
                "proxy_port": proxy_port,
                "ssl": False,
                "status": False,
            }
            # public.print_log("container_info: {}".format(container_info))

            if container_info["status"] == -1:
                proxy_port = []
            else:
                container_info = container_info['message']
                for key, value in container_info['NetworkSettings']['Ports'].items():

                    if value:
                        proxy_port.append(value[0]['HostPort'])

            try:
                proxy_info_data = dp.sql('dk_sites').where('container_id=?', (container_id,)).order('id desc').find()
                if not proxy_info_data:
                    return public.return_message(0, 0, proxy_info)

                proxy_info = proxy_info_data

                site_result = public.M('sites').where("name=?", (proxy_info['name'],)).find()
                if not site_result:
                    dp.sql('dk_sites').where('container_id=?', (container_id,)).delete()
                    dp.sql('dk_domain').where('pid=?', (proxy_info['id'],)).delete()
                    return public.return_message(0, 0, proxy_info)

                path = '/www/server/panel/vhost/cert/' + proxy_info['name']
                conf_file = '/www/server/panel/vhost/nginx/' + proxy_info['name'] + '.conf'
                csrpath = path + "/fullchain.pem"
                keypath = path + "/privkey.pem"
                proxy_info["ssl"] = False
                if os.path.exists(csrpath) and os.path.exists(keypath):
                    try:
                        conf = public.readFile(conf_file)
                        if conf:
                            if (conf.find("ssl_certificate") != -1):
                                proxy_info["ssl"] = True
                        proxy_info['cert'] = public.readFile(csrpath)
                        proxy_info['key'] = public.readFile(keypath)
                    except:
                        proxy_info['cert'] = ""
                        proxy_info['key'] = ""

                proxy_info["status"] = True
                proxy_info['proxy_port'] = proxy_port
            except:
                pass

            return public.return_message(0, 0, proxy_info)
        except Exception as ex:
            public.print_log(traceback.format_exc())
            public.print_log("error: {}".format(ex))
            return public.return_message(-1, 0, ex)

    # 2024/1/2 下午 5:43 关闭容器的反向代理
    def close_proxy(self, get):
        '''
            @name 关闭容器的反向代理
            @param "data":{"参数名":""} <数据类型> 参数描述
            @return dict{"status":True/False,"msg":"提示信息"}
        '''

        # 校验参数
        try:
            get.validate([
                Param('container_id').Require().String(),
            ], [
                public.validate.trim_filter(),
            ])
        except Exception as ex:
            public.print_log("error info: {}".format(ex))
            return public.return_message(-1, 0, ex)
        try:
            # if not hasattr(get, 'container_id'):
            #     return public.return_message(-1, 0, public.lang("parameter error!"))

            container_id = get.container_id
            proxy_info = dp.sql('dk_sites').where('container_id=?', (container_id,)).order('id desc').find()

            if not proxy_info:
                return public.return_message(-1, 0, public.lang("No reverse proxy information was detected!"))

            newpid = public.M('domain').where("name=? and port=?", (proxy_info["name"], 80)).getField('pid')
            if not newpid:
                return public.return_message(-1, 0, public.lang("No reverse proxy information was detected!"))

            # 删除站点
            public.M('sites').where("name=?", (proxy_info['name'],)).delete()
            public.M('domain').where("name=?", (proxy_info['name'],)).delete()

            # 删除数据库记录
            dp.sql('dk_sites').where('container_id=?', (container_id,)).delete()
            dp.sql('dk_domain').where('pid=?', (proxy_info['id'],)).delete()

            return public.return_message(0, 0, public.lang("successfully delete!"))
        except:
            return public.return_message(-1, 0, traceback.format_exc())

    # 2024/1/2 下午 5:57 获取指定域名的证书内容
    def get_cert_info(self, get):
        '''
            @name 获取指定域名的证书内容
            @author wzz <2024/1/2 下午 5:58>
            @param "data":{"参数名":""} <数据类型> 参数描述
            @return dict{"status":True/False,"msg":"提示信息"}
        '''
        try:
            if not hasattr(get, 'cert_name'): return public.return_message(-1, 0, public.lang("parameter error!"))
            cert_name = get.cert_name
            # 2024/1/3 下午 4:50 处理通配符域名，将*.spider.com替换成spider.com
            if cert_name.startswith('*.'):
                cert_name = cert_name.replace('*.', '')
            if not os.path.exists('/www/server/panel/vhost/ssl/{}'.format(cert_name)):
                return public.return_message(-1, 0, public.lang("Certificate does not exist!"))
            cert_data = {}
            cert_data['cert_name'] = cert_name
            cert_data['cert'] = public.readFile('/www/server/panel/vhost/ssl/{}/fullchain.pem'.format(cert_name))
            cert_data['key'] = public.readFile('/www/server/panel/vhost/ssl/{}/privkey.pem'.format(cert_name))
            cert_data['info'] = json.loads(
                public.readFile('/www/server/panel/vhost/ssl/{}/info.json'.format(cert_name)))
            return public.return_message(0, 0, cert_data)
        except:
            return public.return_message(-1, 0, traceback.format_exc())

    def check_table_dk_domain(self):
        '''
            @name 检查并创建表
            @return dict{"status":True/False,"msg":"提示信息"}
        '''
        if not dp.sql('sqlite_master').where('type=? AND name=?', ('table', 'dk_domain')).count():
            dp.sql('dk_domain').execute(
                "CREATE TABLE `dk_domain` (`id` INTEGER PRIMARY KEY AUTOINCREMENT, `pid` INTEGER, `name` TEXT, `addtime` TEXT )",
                ()
            )

    def check_table_dk_sites(self):
        '''
            @name 检查并创建表
            @return dict{"status":True/False,"msg":"提示信息"}
        '''
        if not dp.sql('sqlite_master').where('type=? AND name=?', ('table', 'dk_sites')).count():
            dp.sql('dk_sites').execute(
                "CREATE TABLE `dk_sites` (`id` INTEGER PRIMARY KEY AUTOINCREMENT, `name` TEXT, `path` TEXT, `status` TEXT DEFAULT 1, `ps` TEXT, `addtime` TEXT, `type_id` integer DEFAULT 111, `edate` integer DEFAULT '0000-00-00', `project_type` STRING DEFAULT 'dk_proxy', `container_id` TEXT DEFAULT '', `container_name` TEXT DEFAULT '', `container_port` TEXT DEFAULT '')",
                ()
            )