1
C:\Python311\python.exe "C:\win-acme\CustomizeScripts\dns.py" %*

1
# requirements: requests, dnspython
2
# python >= 3.6 (typehint, f-string)
3
# python >= 3.11 (StrEnum)
4
import requests
5
import sys
6
from enum import IntEnum, StrEnum
7
import time
8
import logging
9
import dns.resolver
10

11
logging.basicConfig(level=logging.INFO)
12
logger = logging.getLogger(__name__)
13
fmt = logging.Formatter("%(asctime)s - %(levelname)s - %(message)s",datefmt="%Y-%m-%d %H:%M:%S")
14
stream_handler = logging.StreamHandler()
15
stream_handler.setFormatter(fmt)
16
logger.addHandler(stream_handler)
17

18
API_KEY = "YOUR_API_KEY"
19
BASE = "https://www.sample.com/api"
20
TIMEOUT_MIN = 10
21

22
class VERSION(IntEnum):
23
    DEFAULT = 1
24

25
class TYPE(StrEnum):
26
    XML = "xml"
27
    JSON = "json"
28

29
class ACTION(StrEnum):
30
    ADD_DNS_RECORD = "dnsAddRecord"
31
    LIST_DNS_RECORDS = "dnsListRecords"
32
    DELETE_DNS_RECORD = "dnsDeleteRecord"
33

34
class RRTYPE(StrEnum):
35
    A = "A"
36
    AAAA = "AAAA"
37
    CNAME = "CNAME"
38
    MX = "MX"
39
    TXT = "TXT"
40
    SRV = "SRV"
41
    CAA = "CAA"
42

43
def wait_for_dns_propagation(txt_record_name: str, expected_value: str,timeout: int = 60*10, interval: int = 30):
44
    start = time.time()
45
    while True:
46
        try:
47
            answers = dns.resolver.resolve(txt_record_name, 'TXT')
48
            for rdata in answers:
49
                for txt_string in rdata.strings:
50
                    try:
51
                        decoded_value = txt_string.decode()
52
                        if decoded_value == expected_value:
53
                            logger.info(f"TXT记录生效: {txt_record_name} = {expected_value}")
54
                            return True
55
                    except Exception as e:
56
                        logger.error(f"无法解码字符串:{e}")
57
                        continue
58
        except Exception as e:
59
            logger.warning(f"查询DNS失败: {e}, 等待{interval}s后重试")
60
            time.sleep(interval)
61
        elapsed = time.time() - start
62
        if elapsed > timeout:
63
            logger.error(f"等待 TXT 记录超时: {txt_record_name}")
64
            return False
65

66
def add(domain: str, txt_value: str, rrhost: str):
67
    url = f"{BASE}/{ACTION.ADD_DNS_RECORD}?version={VERSION.DEFAULT}&type={TYPE.JSON}&key={API_KEY}&domain={domain}&rrtype={RRTYPE.TXT}&rrhost={rrhost}&rrvalue={txt_value}&rrttl=3600"
68
    r = requests.get(url)
69
    if r.status_code != 200:
70
        logger.error(f"添加DNS记录失败: {r.text}")
71
        sys.exit(1)
72
    logger.info(r.text)
73
    logger.info(f"等待DNS记录生效...{TIMEOUT_MIN}分钟")
74
    res = wait_for_dns_propagation(rrhost, txt_value, timeout=60*TIMEOUT_MIN, interval=30)
75
    if res:
76
        sys.exit(0)
77
    else:
78
        logger.error("DNS记录超时未生效, 请检查是否成功添加，如有必要可上调最大等待时长")
79
        sys.exit(1)
80

81
def delete(domain: str, rec_id: str):
82
    url = f"{BASE}/{ACTION.DELETE_DNS_RECORD}?version={VERSION.DEFAULT}&type={TYPE.JSON}&key={API_KEY}&domain={domain}&rrid={rec_id}"
83
    r = requests.get(url)
84
    logger.info(r.text)
85
    sys.exit(0 if r.status_code == 200 else 1)
86

87
def get_txt_record_id(domain: str, txt_value: str):
88
    url = f"{BASE}/{ACTION.LIST_DNS_RECORDS}?version={VERSION.DEFAULT}&type={TYPE.JSON}&key={API_KEY}&domain={domain}"
89
    r = requests.get(url)
90
    logger.info(r.text)
91
    data = r.json()
92
    reply = data.get("reply", None)
93
    if reply:
94
        resource_records = reply.get("resource_record", None)
95
        if resource_records:
96
            for rec in resource_records:
97
                if rec.get("type") == RRTYPE.TXT and rec.get("value") == txt_value:
98
                    return rec.get("record_id")
99
            logger.error("未找到一致的TXT记录")
100
        else:
101
            logger.error("未找到记录")
102
    else:
103
        logger.error("请求失败")
104
    return None
105

106
def main():
107
    action = sys.argv[1]
108
    domain = sys.argv[2]
109
    txt_value = sys.argv[3]
110
    rrhost = sys.argv[4] if len(sys.argv) > 4 else "_acme-challenge"
111
    if action == "add":
112
        add(domain, txt_value, rrhost)
113
    elif action == "delete":
114
        rec_id = get_txt_record_id(domain, txt_value)
115
        if rec_id:
116
            delete(domain, rec_id)
117
        else:
118
            logger.warning("没有需要删除的记录")
119
            sys.exit(0)
120
    else:
121
        raise ValueError("未知操作")
122

123

124
if __name__ == "__main__":
125
    main()