File size: 9,418 Bytes
17e971c | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 | # coding: utf-8
# -------------------------------------------------------------------
# 宝塔Linux面板
# -------------------------------------------------------------------
# Copyright (c) 2015-2099 宝塔软件(http://bt.cn) All rights reserved.
# -------------------------------------------------------------------
# Author: wzz <wzz@bt.cn>
# -------------------------------------------------------------------
import json
import os
import traceback
from datetime import datetime
import public
from btdockerModel import dk_public as dp
from btdockerModel.dockerBase import dockerBase
class main(dockerBase):
# 2023/12/27 下午 2:56 创建容器反向代理
def create_proxy(self, get):
'''
@name 创建容器反向代理
@author wzz <2023/12/27 下午 2:57>
@param "data":{"参数名":""} <数据类型> 参数描述
@return dict{"status":True/False,"msg":"提示信息"}
'''
if not (os.path.exists('/etc/init.d/nginx') or os.path.exists('/etc/init.d/httpd')):
return public.returnMsg(False, '未检测到nginx或apache服务，请先安装其中一个!')
if not hasattr(get, 'domain'):
return public.returnMsg(False, '参数错误,请传domain参数!')
if not hasattr(get, 'container_port'):
return public.returnMsg(False, '参数错误,请传container_port参数!')
self.siteName = get.domain.strip()
if dp.sql('docker_sites').where('container_id=?', (get.container_id,)).find():
self.close_proxy(get)
# 2024/2/23 下午 12:05 如果其他地方有这个域名，则禁止添加
newpid = public.M('domain').where("name=? and port=?", (self.siteName, 80)).getField('pid')
if newpid:
result = public.M('sites').where("id=?", (newpid,)).find()
if result:
return public.returnMsg(False, '项目类型【{}】已存在域名：{}'.format(result['project_type'], self.siteName))
newpid = dp.sql("docker_domain").where("name=? and port=?", (self.siteName, 80)).getField('pid')
if newpid:
result = dp.sql("docker_sites").where("id=?", (newpid,)).find()
if result:
return public.returnResult(False, 'docker网站项目【{}】已存在域名：{}，请勿重复添加！'.format(result['name'], self.siteName))
self.container_port = get.container_port
if not dp.check_socket(self.container_port):
return public.returnMsg(False, "服务器端口[{}]未被使用，请输入正在使用的端口进行反代！".format(self.container_port))
from mod.project.docker.sites.sitesManage import SitesManage
site_manage = SitesManage()
try:
args = public.to_dict_obj({
"name": get.container_name,
"container_id": get.container_id,
"type": "proxy",
"domains": self.siteName,
"port": self.container_port,
"remark": "容器[{}]的反向代理".format(get.container_name),
})
create_result = site_manage.create_site(args)
if not create_result['status']:
return public.returnResult(False, create_result['msg'])
if hasattr(get, "privateKey") and hasattr(get, "certPem") and get.privateKey != "" and get.certPem != "":
args.site_name = self.siteName
args.key = get.privateKey
args.csr = get.certPem
ssl_result = site_manage.set_ssl(args)
if not ssl_result['status']:
result = public.M('sites').where("name=?", (self.siteName,)).find()
args.id = result['id']
args.site_name = self.siteName
args.remove_path = 1
site_manage.delete_site(args)
return public.returnResult(False, ssl_result['msg'])
return public.returnMsg(True, '添加成功!')
except Exception as e:
result = public.M('sites').where("name=?", (self.siteName,)).find()
args = public.to_dict_obj({
"id": result['id'],
"site_name": self.siteName,
"remove_path": 1,
})
site_manage.delete_site(args)
return public.returnMsg(True, '添加失败，错误{}!'.format(str(e)))
# 2024/1/2 下午 5:34 获取容器的反向代理信息
def get_proxy_info(self, get):
'''
@name 获取容器的反向代理信息
@author wzz <2024/1/2 下午 5:34>
@param "data":{"参数名":""} <数据类型> 参数描述
@return dict{"status":True/False,"msg":"提示信息"}
'''
if not hasattr(get, 'container_id'):
return public.returnMsg(False, '参数错误,请传container_id参数!')
container_id = get.container_id
from btdockerModel import containerModel as dc
get.id = container_id
container_info = dc.main().get_container_info(get)
proxy_port = []
proxy_info = {
"proxy_port": proxy_port,
"ssl": False,
"status": False,
}
if "status" in container_info and not container_info["status"]:
proxy_port = []
else:
for key, value in container_info['NetworkSettings']['Ports'].items():
if value:
proxy_port.append(value[0]['HostPort'])
try:
proxy_info_data = dp.sql('docker_sites').where('container_id=?', (container_id,)).order('id desc').find()
if not proxy_info_data:
return proxy_info
proxy_info = proxy_info_data
path = '/www/server/panel/vhost/cert/' + proxy_info['name']
conf_file = '/www/server/panel/vhost/nginx/' + proxy_info['name'] + '.conf'
csrpath = path + "/fullchain.pem"
keypath = path + "/privkey.pem"
proxy_info["ssl"] = False
if os.path.exists(csrpath) and os.path.exists(keypath):
try:
conf = public.readFile(conf_file)
if conf:
if (conf.find("ssl_certificate") != -1):
proxy_info["ssl"] = True
proxy_info['cert'] = public.readFile(csrpath)
proxy_info['key'] = public.readFile(keypath)
except:
proxy_info['cert'] = ""
proxy_info['key'] = ""
proxy_info["status"] = True
proxy_info['proxy_port'] = proxy_port
except:
pass
return proxy_info
# 2024/1/2 下午 5:43 关闭容器的反向代理
def close_proxy(self, get):
'''
@name 关闭容器的反向代理
@param "data":{"参数名":""} <数据类型> 参数描述
@return dict{"status":True/False,"msg":"提示信息"}
'''
try:
if not hasattr(get, 'container_id'):
return public.returnMsg(False, '参数错误,请传container_id参数!')
container_id = get.container_id
proxy_info = dp.sql('docker_sites').where('container_id=?', (container_id,)).find()
if not proxy_info:
return public.returnMsg(False, '未检测到反向代理信息!')
from mod.project.docker.sites.sitesManage import SitesManage
site_manage = SitesManage()
args = public.dict_obj()
args.id = proxy_info['id']
args.site_name = proxy_info['name']
args.remove_path = 1
delete_result = site_manage.delete_site(args)
if not delete_result['status']:
return public.returnMsg(False, delete_result['msg'])
return public.returnMsg(True, '删除成功!')
except:
return traceback.format_exc()
# 2024/1/2 下午 5:57 获取指定域名的证书内容
def get_cert_info(self, get):
'''
@name 获取指定域名的证书内容
@author wzz <2024/1/2 下午 5:58>
@param "data":{"参数名":""} <数据类型> 参数描述
@return dict{"status":True/False,"msg":"提示信息"}
'''
try:
if not hasattr(get, 'cert_name'): return public.returnMsg(False, '参数错误!')
cert_name = get.cert_name
# 2024/1/3 下午 4:50 处理通配符域名，将*.spider.com替换成spider.com
if cert_name.startswith('*.'):
cert_name = cert_name.replace('*.', '')
if not os.path.exists('/www/server/panel/vhost/ssl/{}'.format(cert_name)):
return public.returnMsg(False, '证书不存在!')
cert_data = {}
cert_data['cert_name'] = cert_name
cert_data['cert'] = public.readFile('/www/server/panel/vhost/ssl/{}/fullchain.pem'.format(cert_name))
cert_data['key'] = public.readFile('/www/server/panel/vhost/ssl/{}/privkey.pem'.format(cert_name))
cert_data['info'] = json.loads(
public.readFile('/www/server/panel/vhost/ssl/{}/info.json'.format(cert_name)))
return cert_data
except:
return traceback.format_exc()
|