106 lines
4.2 KiB
PHP
106 lines
4.2 KiB
PHP
<?php
|
|
|
|
if (processForm()) {
|
|
$_POST['domain'] = formatDomain($_POST['domain']);
|
|
|
|
if (dirsStatuses('dns', 'http')[$_POST['dir']] !== false)
|
|
output(403, 'Wrong value for <code>dir</code>.');
|
|
|
|
if (query('select', 'sites', ['domain' => $_POST['domain']], 'domain') !== [])
|
|
output(403, 'Ce domaine existe déjà sur ce service.');
|
|
|
|
$remoteAaaaRecords = dns_get_record($_POST['domain'], DNS_AAAA);
|
|
if (is_array($remoteAaaaRecords) !== true)
|
|
output(500, 'Erreur lors de la récupération de l\'enregistrement AAAA.');
|
|
if (equalArrays([CONF['ht']['ipv6_address']], array_column($remoteAaaaRecords, 'ipv6')) !== true)
|
|
output(403, 'Ce domaine doit avoir pour unique enregistrement AAAA <code>' . CONF['ht']['ipv6_address'] . '</code>.');
|
|
|
|
$remoteARecords = dns_get_record($_POST['domain'], DNS_A);
|
|
if (is_array($remoteARecords) !== true)
|
|
output(500, 'Erreur lors de la récupération de l\'enregistrement A.');
|
|
if (equalArrays([CONF['ht']['ipv4_address']], array_column($remoteARecords, 'ip')) !== true)
|
|
output(403, 'Ce domaine doit avoir pour unique enregistrement A <code>' . CONF['ht']['ipv4_address'] . '</code>.');
|
|
|
|
$remoteTXTRecords = dns_get_record($_POST['domain'], DNS_TXT);
|
|
if (is_array($remoteTXTRecords) !== true)
|
|
output(500, 'Erreur lors de la récupération de l\'enregistrement TXT.');
|
|
if (preg_match('/^' . preg_quote(SERVER_NAME, '/') . '_domain-verification=([0-9a-f]{8})-([0-9a-f]{32})$/Dm', implode(LF, array_column($remoteTXTRecords, 'txt')), $matches) !== 1)
|
|
output(403, 'Aucun enregistrement TXT au format correct trouvé.');
|
|
|
|
checkAuthToken($matches[1], $matches[2]);
|
|
|
|
rateLimit();
|
|
|
|
addSite($_SESSION['username'], $_POST['dir'], $_POST['domain'], 'dns', 'http');
|
|
|
|
exec('2>&1 ' . CONF['ht']['sudo_path'] . ' ' . CONF['ht']['certbot_path'] . ' certonly' . (($_SESSION['type'] === 'trusted') ? '' : ' --test-cert') . ' --key-type rsa --rsa-key-size 3072 --webroot --webroot-path /srv/niver/acme --domain ' . $_POST['domain'], $output, $returnCode);
|
|
if ($returnCode !== 0)
|
|
output(500, 'Certbot failed to get a Let\'s Encrypt certificate.', $output);
|
|
|
|
$nginxConf = 'server {
|
|
listen [' . CONF['ht']['ipv6_listen_address'] . ']:' . CONF['ht']['https_port'] . ' ssl http2;
|
|
listen ' . CONF['ht']['ipv4_listen_address'] . ':' . CONF['ht']['https_port'] . ' ssl http2;
|
|
server_name ' . $_POST['domain'] . ';
|
|
root ' . CONF['ht']['ht_path'] . '/' . $_SESSION['username'] . '/' . $_POST['dir'] . ';
|
|
|
|
ssl_certificate /etc/letsencrypt/live/' . $_POST['domain'] . '/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/' . $_POST['domain'] . '/privkey.pem;
|
|
|
|
include inc/ht-tls.conf;
|
|
}
|
|
';
|
|
if (file_put_contents(CONF['ht']['nginx_config_path'] . '/' . $_POST['domain'] . '.conf', $nginxConf) === false)
|
|
output(500, 'Failed to write Nginx configuration.');
|
|
|
|
// Reload Nginx
|
|
exec(CONF['ht']['sudo_path'] . ' ' . CONF['ht']['nginx_reload_cmd'], result_code: $code);
|
|
if ($code !== 0)
|
|
output(500, 'Failed to reload Nginx.');
|
|
|
|
output(200, 'Accès HTTP par domaine ajouté sur ce dossier !');
|
|
}
|
|
|
|
$dirsStatuses = dirsStatuses('onion', 'http');
|
|
|
|
$proof = getAuthToken();
|
|
|
|
?>
|
|
|
|
<p>
|
|
Ajouter sur un dossier de site un accès <?= linkToDocs('http', 'HTTP') ?> par <?= linkToDocs('dns', 'DNS') ?> et <?= linkToDocs('tls', 'TLS') ?> <?= linkToDocs('ca', 'authentifié par <em>Let\'s Encrypt</em>') ?>.
|
|
</p>
|
|
|
|
<p>
|
|
La présence des enregistrements ci-après sera vérifiée lors du traitement de ce formulaire.
|
|
</p>
|
|
|
|
<dl>
|
|
<dt><code>AAAA</code></dt>
|
|
<dd>
|
|
<code><?= CONF['ht']['ipv6_address'] ?></code>
|
|
</dd>
|
|
<dt><code>A</code></dt>
|
|
<dd>
|
|
<code><?= CONF['ht']['ipv4_address'] ?></code>
|
|
</dd>
|
|
<dt><code>TXT</code></dt>
|
|
<dd>
|
|
<code><?= SERVER_NAME ?>_domain-verification=<?= $proof ?></code>
|
|
</dd>
|
|
</dl>
|
|
|
|
<form method="post">
|
|
<label for="domain">Domaine sur lequel répondre</label><br>
|
|
<input required="" placeholder="site.<?= PLACEHOLDER_DOMAIN ?>" id="domain" name="domain" type="text"><br>
|
|
<label for="dir">Dossier ciblé</label><br>
|
|
<select required="" name="dir" id="dir">
|
|
<option value="" disabled="" selected="">---</option>
|
|
<?php
|
|
foreach ($dirsStatuses as $dir => $alreadyEnabled)
|
|
echo ' <option' . ($alreadyEnabled ? ' disabled=""' : '') . ' value="' . $dir . '">' . $dir . '</option>' . LF;
|
|
?>
|
|
</select>
|
|
<br>
|
|
<input value="Valider" type="submit">
|
|
</form>
|