Add dns-zone-add and dns-zone-delete

This commit is contained in:
2025-08-06 23:53:08 +02:00
parent 15ad2c5ab7
commit d0c42d0558
9 changed files with 457 additions and 33 deletions

View File

@@ -4,25 +4,27 @@
# config variables #
####################
if [ -z "${!DNS_KEYS[*]}" ]; then
declare -A DNS_KEYS=()
fi
[ -z "${!DNS_KEYS[*]}" ] && declare -A DNS_KEYS=()
[ -z "${!BASE_CONFIG[*]}" ] && declare -A BASE_CONFIG=()
[ -z "${!ZONE_TEMPLATES[*]}" ] && declare -A ZONE_TEMPLATES=()
DNS_IP=${DNS_IP:-127.0.0.1}
DIG=${DIG:-$(which dig)} || exit 1
IDN2=${IDN2:-$(which idn2)} || exit 1
JQ=${JQ:-$(which jq)} || exit 1
NAMED_CHECKCONF=${NAMED_CHECKCONF:-$(which named-checkconf)} || exit 1
NSUPDATE=${NSUPDATE:-$(which nsupdate)} || exit 1
TERMINAL_WITH=${MAX_TERMINAL_WITH:-$($(which stty) size | cut -d " " -f 2)} || exit 1
RNDC=${RNDC:-$(which rndc)} || exit 1
TERMINAL_WITH=${MAX_TERMINAL_WITH:-$($(which stty) size | cut -d " " -f 2)} || exit 1
####################
# global variables #
####################
# List of managable DNS record types
declare -a DNS_RECORD_TYPES=("A" "AAAA" "CAA" "CDS" "CNAME" "DS" "MX" "NS" "PTR" "SRV" "TLSA" "TXT")
declare -a DNS_RECORD_TYPES=("A" "AAAA" "CAA" "CDS" "CNAME" "DNAME" "DS" "MX" "NS" "PTR" "SRV" "TLSA" "TXT")
# Global variables
NEWLINE=$'\n'
@@ -116,7 +118,7 @@ _get_keyfile() {
return 0
fi
echo "ERROR: config: no key found for '$zone@$view' or '$view'" >&2
echo "ERROR: no key configured for '$zone@$view' or '$view'" >&2
return 1
}
@@ -149,6 +151,31 @@ _nsupdate() {
}
#####################
# general functions #
#####################
dns_get_base_config() {
local view=$1
local zone_dir_retvar=${2:-REPLY}
local conf_dir_retvar=${3:-REPLY}
local conf_file_retvar=${4:-REPLY}
local base_config=${BASE_CONFIG[$view]}
[ -z "$base_config" ] && echo "ERROR: no base config found for view -- '$view'" >&2 && return 1
local __zone_dir __conf_dir __conf_file
IFS=":" read -r __zone_dir __conf_dir __conf_file <<<"$base_config"
[ -z "$__zone_dir" -o -z "$__conf_dir" -o -z "$__conf_file" ] && echo "ERROR: invalid BASE_CONFIG for view -- '$view'" >&2 && return 2
! [ -d "$__conf_dir" ] && echo "ERROR: conf dir: no such directory -- '$__conf_dir'" >&2 && return 3
! [ -d "$__zone_dir" ] && echo "ERROR: zone dir: no such directory -- '$__zone_dir'" >&2 && return 4
declare -g $zone_dir_retvar="$__zone_dir"
declare -g $conf_dir_retvar="$__conf_dir"
declare -g $conf_file_retvar="$__conf_file"
}
#############################
# data generation functions #
#############################
@@ -237,7 +264,6 @@ dns_check_zone() {
$found && declare -g $retvar="$zone" && return 0
declare -g $retvar=""
echo "ERROR: zone does not exist -- '$zone'" >&2
return 2
}
@@ -257,7 +283,7 @@ dns_check_zone_view() {
local zone_view=$1
local zone_retvar=$2
local view_retvar=$3
local zone view
IFS='@' read -r zone view <<<"$zone_view"
@@ -291,12 +317,49 @@ dns_check_zone_view() {
}
dns_check_zone_name() {
local name=${1,,}
local zone=${1,,}
local retvar=${2:-REPLY}
[[ "$name" =~ ^[a-z0-9_][a-z0-9_.-]*$ ]] && [[ "$name" != *"." ]] && return 0
zone=$("$IDN2" <<<"$zone")
if ! [[ "$zone" =~ ^[a-z0-9_][a-z0-9_.-]*$ ]] || [[ "$zone" == *"." ]]; then
echo "ERROR: invalid zone name -- '$zone'" >&2
return 1
fi
echo "ERROR: invalid zone name -- '$name'" >&2
return 1
declare -g $retvar="$zone"
}
dns_check_zone_name_view() {
local zone_view=${1,,}
local zone_retvar=$2
local view_retvar=$3
local zone view
IFS='@' read -r zone view <<<"$zone_view"
dns_check_zone_name "$zone" zone || return 1
if [ -z "$view" ]; then
view=$NAMED_DEFAULT_VIEW
elif [ "$view" != "*" ]; then
dns_check_view "$view" || return 2
fi
local -a views=()
json_array_to_bash views < <(dns_zone_views "$zone")
if (( ${#views[@]} > 0 )); then
if [ "${view}" == "*" ]; then
echo "ERROR: zone '$zone' already exists in these views -- '$(join_by ", " "${views[@]}")'" >&2 && return 4
else
in_array "$view" "${views[@]}" && echo "ERROR: zone '$zone' already exists in view -- '$view'" >&2 && return 5
fi
fi
[ -n "$zone_retvar" ] && declare -g $zone_retvar="$zone"
[ -n "$view_retvar" ] && declare -g $view_retvar="$view"
return 0
}
dns_check_record_name() {
@@ -308,7 +371,7 @@ dns_check_record_name() {
name=$("$IDN2" <<<"$name")
local LC_ALL=C
if [[ "$name" =~ ^[a-z0-9_][a-z0-9_.-]*$ ]] && [[ "$name" != *"." ]]; then
if [[ "$name" =~ ^[a-zA-Z0-9_][a-zA-Z0-9_.-]*$ ]] && [[ "$name" != *"." ]]; then
declare -g $retvar="$name"
return 0
fi
@@ -464,22 +527,19 @@ dns_select_record_type() {
declare -g $retvar="$rtype"
}
dns_read_zone_name() {
# TODO
exit
dns_read_zone_view() {
local zone_retvar=$1
local view_retvar=$2
local zone view
while [ -z "$zone" ]; do
read -e -p "Zone name (ZONE or ZONE@VIEW): " zone
[ -n "$zone" ] && ! dns_check_zone_name_view "$zone" zone view && zone=""
done
echo
#if [ -n "$zone" ]; then
# if ! in_array "$zone" "${zones[@]}"; then
# echo "ERROR: unknown zone '$zone'" >&2
# return 1
# fi
#fi
#if [ -n "$view" ]; then
# if ! in_array "$view" "${views[@]}" ]]; then
# echo "ERROR: zone '$zone' is not part of view '$view'" >&2
# return 2
# fi
#fi
declare -g $zone_retvar="$zone"
declare -g $view_retvar="$view"
}
dns_read_record_name() {
@@ -591,3 +651,11 @@ dns_record_delete() {
_nsupdate "$zone" "$view" "$update_script" "$pretend"
return $?
}
dns_reload_config() {
echo -n "Reload Bind config... "
rndc_args=""
[ -n "$CONTROL_KEY" ] && rndc_args="-k $CONTROL_KEY"
! "$RNDC" $rndc_args reconfig && echo "ERROR: rndc reconfig failed" >&2 && return 1
echo "Ok"
}