127 lines
3.1 KiB
Go
127 lines
3.1 KiB
Go
// Package vultr implements a DNS provider for solving the DNS-01 challenge using
|
|
// the vultr DNS.
|
|
// See https://www.vultr.com/api/#dns
|
|
package vultr
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"strings"
|
|
|
|
vultr "github.com/JamesClonk/vultr/lib"
|
|
"github.com/xenolf/lego/acme"
|
|
)
|
|
|
|
// DNSProvider is an implementation of the acme.ChallengeProvider interface.
|
|
type DNSProvider struct {
|
|
client *vultr.Client
|
|
}
|
|
|
|
// NewDNSProvider returns a DNSProvider instance with a configured Vultr client.
|
|
// Authentication uses the VULTR_API_KEY environment variable.
|
|
func NewDNSProvider() (*DNSProvider, error) {
|
|
apiKey := os.Getenv("VULTR_API_KEY")
|
|
return NewDNSProviderCredentials(apiKey)
|
|
}
|
|
|
|
// NewDNSProviderCredentials uses the supplied credentials to return a DNSProvider
|
|
// instance configured for Vultr.
|
|
func NewDNSProviderCredentials(apiKey string) (*DNSProvider, error) {
|
|
if apiKey == "" {
|
|
return nil, fmt.Errorf("Vultr credentials missing")
|
|
}
|
|
|
|
c := &DNSProvider{
|
|
client: vultr.NewClient(apiKey, nil),
|
|
}
|
|
|
|
return c, nil
|
|
}
|
|
|
|
// Present creates a TXT record to fulfil the DNS-01 challenge.
|
|
func (c *DNSProvider) Present(domain, token, keyAuth string) error {
|
|
fqdn, value, ttl := acme.DNS01Record(domain, keyAuth)
|
|
|
|
zoneDomain, err := c.getHostedZone(domain)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
name := c.extractRecordName(fqdn, zoneDomain)
|
|
|
|
err = c.client.CreateDNSRecord(zoneDomain, name, "TXT", `"`+value+`"`, 0, ttl)
|
|
if err != nil {
|
|
return fmt.Errorf("Vultr API call failed: %v", err)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// CleanUp removes the TXT record matching the specified parameters.
|
|
func (c *DNSProvider) CleanUp(domain, token, keyAuth string) error {
|
|
fqdn, _, _ := acme.DNS01Record(domain, keyAuth)
|
|
|
|
zoneDomain, records, err := c.findTxtRecords(domain, fqdn)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
for _, rec := range records {
|
|
err := c.client.DeleteDNSRecord(zoneDomain, rec.RecordID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (c *DNSProvider) getHostedZone(domain string) (string, error) {
|
|
domains, err := c.client.GetDNSDomains()
|
|
if err != nil {
|
|
return "", fmt.Errorf("Vultr API call failed: %v", err)
|
|
}
|
|
|
|
var hostedDomain vultr.DNSDomain
|
|
for _, d := range domains {
|
|
if strings.HasSuffix(domain, d.Domain) {
|
|
if len(d.Domain) > len(hostedDomain.Domain) {
|
|
hostedDomain = d
|
|
}
|
|
}
|
|
}
|
|
if hostedDomain.Domain == "" {
|
|
return "", fmt.Errorf("No matching Vultr domain found for domain %s", domain)
|
|
}
|
|
|
|
return hostedDomain.Domain, nil
|
|
}
|
|
|
|
func (c *DNSProvider) findTxtRecords(domain, fqdn string) (string, []vultr.DNSRecord, error) {
|
|
zoneDomain, err := c.getHostedZone(domain)
|
|
if err != nil {
|
|
return "", nil, err
|
|
}
|
|
|
|
var records []vultr.DNSRecord
|
|
result, err := c.client.GetDNSRecords(zoneDomain)
|
|
if err != nil {
|
|
return "", records, fmt.Errorf("Vultr API call has failed: %v", err)
|
|
}
|
|
|
|
recordName := c.extractRecordName(fqdn, zoneDomain)
|
|
for _, record := range result {
|
|
if record.Type == "TXT" && record.Name == recordName {
|
|
records = append(records, record)
|
|
}
|
|
}
|
|
|
|
return zoneDomain, records, nil
|
|
}
|
|
|
|
func (c *DNSProvider) extractRecordName(fqdn, domain string) string {
|
|
name := acme.UnFqdn(fqdn)
|
|
if idx := strings.Index(name, "."+domain); idx != -1 {
|
|
return name[:idx]
|
|
}
|
|
return name
|
|
}
|