mirror of
https://github.com/1Panel-dev/1Panel.git
synced 2024-12-16 01:38:59 +08:00
95 lines
3.2 KiB
Go
95 lines
3.2 KiB
Go
package job
|
|
|
|
import (
|
|
"github.com/1Panel-dev/1Panel/backend/app/dto/request"
|
|
"github.com/1Panel-dev/1Panel/backend/app/repo"
|
|
"github.com/1Panel-dev/1Panel/backend/app/service"
|
|
"github.com/1Panel-dev/1Panel/backend/constant"
|
|
"github.com/1Panel-dev/1Panel/backend/global"
|
|
"github.com/1Panel-dev/1Panel/backend/utils/common"
|
|
"github.com/1Panel-dev/1Panel/backend/utils/files"
|
|
"path"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
)
|
|
|
|
type ssl struct {
|
|
}
|
|
|
|
func NewSSLJob() *ssl {
|
|
return &ssl{}
|
|
}
|
|
|
|
func getSystemSSL() (bool, uint) {
|
|
settingRepo := repo.NewISettingRepo()
|
|
sslSetting, err := settingRepo.Get(settingRepo.WithByKey("SSL"))
|
|
if err != nil {
|
|
global.LOG.Errorf("load service ssl from setting failed, err: %v", err)
|
|
return false, 0
|
|
}
|
|
if sslSetting.Value == "enable" {
|
|
sslID, _ := settingRepo.Get(settingRepo.WithByKey("SSLID"))
|
|
idValue, _ := strconv.Atoi(sslID.Value)
|
|
if idValue > 0 {
|
|
return true, uint(idValue)
|
|
}
|
|
}
|
|
return false, 0
|
|
}
|
|
|
|
func (ssl *ssl) Run() {
|
|
systemSSLEnable, sslID := getSystemSSL()
|
|
sslRepo := repo.NewISSLRepo()
|
|
sslService := service.NewIWebsiteSSLService()
|
|
sslList, _ := sslRepo.List()
|
|
nyc, _ := time.LoadLocation(common.LoadTimeZone())
|
|
global.LOG.Info("The scheduled certificate update task is currently in progress ...")
|
|
now := time.Now().Add(10 * time.Second)
|
|
for _, s := range sslList {
|
|
if !s.AutoRenew || s.Provider == "manual" || s.Provider == "dnsManual" || s.Status == "applying" {
|
|
continue
|
|
}
|
|
expireDate := s.ExpireDate.In(nyc)
|
|
sub := expireDate.Sub(now)
|
|
if sub.Hours() < 720 {
|
|
global.LOG.Errorf("Update the SSL certificate for the [%s] domain", s.PrimaryDomain)
|
|
if s.Provider == constant.SelfSigned {
|
|
caService := service.NewIWebsiteCAService()
|
|
if _, err := caService.ObtainSSL(request.WebsiteCAObtain{
|
|
ID: s.CaID,
|
|
SSLID: s.ID,
|
|
Renew: true,
|
|
Unit: "year",
|
|
Time: 1,
|
|
}); err != nil {
|
|
global.LOG.Errorf("Failed to update the SSL certificate for the [%s] domain , err:%s", s.PrimaryDomain, err.Error())
|
|
continue
|
|
}
|
|
} else {
|
|
if err := sslService.ObtainSSL(request.WebsiteSSLApply{
|
|
ID: s.ID,
|
|
}); err != nil {
|
|
global.LOG.Errorf("Failed to update the SSL certificate for the [%s] domain , err:%s", s.PrimaryDomain, err.Error())
|
|
continue
|
|
}
|
|
}
|
|
if systemSSLEnable && sslID == s.ID {
|
|
websiteSSL, _ := sslRepo.GetFirst(repo.NewCommonRepo().WithByID(s.ID))
|
|
fileOp := files.NewFileOp()
|
|
secretDir := path.Join(global.CONF.System.BaseDir, "1panel/secret")
|
|
if err := fileOp.WriteFile(path.Join(secretDir, "server.crt"), strings.NewReader(websiteSSL.Pem), 0600); err != nil {
|
|
global.LOG.Errorf("Failed to update the SSL certificate File for 1Panel System domain [%s] , err:%s", s.PrimaryDomain, err.Error())
|
|
continue
|
|
}
|
|
if err := fileOp.WriteFile(path.Join(secretDir, "server.key"), strings.NewReader(websiteSSL.PrivateKey), 0600); err != nil {
|
|
global.LOG.Errorf("Failed to update the SSL certificate for 1Panel System domain [%s] , err:%s", s.PrimaryDomain, err.Error())
|
|
continue
|
|
}
|
|
}
|
|
global.LOG.Errorf("The SSL certificate for the [%s] domain has been successfully updated", s.PrimaryDomain)
|
|
}
|
|
}
|
|
global.LOG.Info("The scheduled certificate update task has completed")
|
|
}
|