127 lines
5.6 KiB
YAML
127 lines
5.6 KiB
YAML
# Apply: kubectl apply -f manifests/network/ddns-cronjob.yaml
|
|
# Delete: kubectl delete -f manifests/network/ddns-cronjob.yaml
|
|
# Description: CronJob that updates nik4nao.com and home.nik4nao.com DNS on Porkbun every 5 minutes.
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: ddns
|
|
---
|
|
apiVersion: batch/v1
|
|
kind: CronJob
|
|
metadata:
|
|
name: porkbun-ddns
|
|
namespace: ddns
|
|
spec:
|
|
schedule: "*/5 * * * *"
|
|
successfulJobsHistoryLimit: 3
|
|
failedJobsHistoryLimit: 1
|
|
jobTemplate:
|
|
spec:
|
|
template:
|
|
spec:
|
|
restartPolicy: OnFailure
|
|
containers:
|
|
- name: ddns
|
|
image: alpine:latest
|
|
env:
|
|
- name: PORKBUN_API_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: porkbun-ddns
|
|
key: api-key
|
|
- name: PORKBUN_SECRET_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: porkbun-ddns
|
|
key: secret-api-key
|
|
command:
|
|
- /bin/sh
|
|
- -c
|
|
- |
|
|
set -euo pipefail
|
|
apk add --no-cache curl jq -q
|
|
|
|
DOMAIN="nik4nao.com"
|
|
TTL=300
|
|
|
|
timestamp() { date +"%Y-%m-%d %H:%M:%S%z"; }
|
|
|
|
# Get current WAN IP
|
|
WAN_IP="$(curl -sf https://api.ipify.org)"
|
|
if [ -z "$WAN_IP" ]; then
|
|
echo "[$(timestamp)] ERROR: Could not detect WAN IP"
|
|
exit 1
|
|
fi
|
|
echo "[$(timestamp)] WAN IP: $WAN_IP"
|
|
|
|
# Get all DNS records once (reused for all iterations)
|
|
RECORDS="$(curl -sf -X POST \
|
|
"https://api.porkbun.com/api/json/v3/dns/retrieve/${DOMAIN}" \
|
|
-H 'Content-Type: application/json' \
|
|
-d "{\"apikey\":\"$PORKBUN_API_KEY\",\"secretapikey\":\"$PORKBUN_SECRET_KEY\"}")"
|
|
|
|
for RECORD_NAME in "" "home"; do
|
|
RECORD_FQDN="${DOMAIN}"
|
|
[ -n "$RECORD_NAME" ] && RECORD_FQDN="${RECORD_NAME}.${DOMAIN}"
|
|
echo "[$(timestamp)] Processing: ${RECORD_FQDN}"
|
|
|
|
# Get all A record IDs for this record
|
|
RECORD_IDS="$(echo "$RECORDS" | jq -r \
|
|
--arg fqdn "$RECORD_FQDN" \
|
|
'.records[] | select(.type=="A" and .name==$fqdn) | .id')"
|
|
|
|
# Get the current DNS IP from the first record
|
|
DNS_IP="$(echo "$RECORDS" | jq -r \
|
|
--arg fqdn "$RECORD_FQDN" \
|
|
'.records[] | select(.type=="A" and .name==$fqdn) | .content' | head -1)"
|
|
|
|
echo "[$(timestamp)] DNS IP: ${DNS_IP:-none}"
|
|
|
|
# Delete all stale duplicate records
|
|
RECORD_COUNT="$(echo "$RECORD_IDS" | grep -c . || true)"
|
|
if [ "$RECORD_COUNT" -gt 1 ]; then
|
|
echo "[$(timestamp)] Found $RECORD_COUNT duplicate records, deleting all..."
|
|
for ID in $RECORD_IDS; do
|
|
curl -sf -X POST \
|
|
"https://api.porkbun.com/api/json/v3/dns/delete/${DOMAIN}/${ID}" \
|
|
-H 'Content-Type: application/json' \
|
|
-d "{\"apikey\":\"$PORKBUN_API_KEY\",\"secretapikey\":\"$PORKBUN_SECRET_KEY\"}" > /dev/null
|
|
echo "[$(timestamp)] Deleted record ID $ID"
|
|
done
|
|
DNS_IP=""
|
|
fi
|
|
|
|
# Get the single remaining record ID (if any)
|
|
RECORD_ID="$(echo "$RECORDS" | jq -r \
|
|
--arg fqdn "$RECORD_FQDN" \
|
|
'.records[] | select(.type=="A" and .name==$fqdn) | .id' | head -1)"
|
|
|
|
# Skip if already correct
|
|
if [ "$RECORD_COUNT" -le 1 ] && [ "$WAN_IP" = "$DNS_IP" ]; then
|
|
echo "[$(timestamp)] No change, skipping."
|
|
continue
|
|
fi
|
|
|
|
echo "[$(timestamp)] IP changed ${DNS_IP:-none} -> $WAN_IP, updating..."
|
|
|
|
if [ -z "$RECORD_ID" ] || [ "$RECORD_COUNT" -gt 1 ]; then
|
|
# Create fresh record
|
|
echo "[$(timestamp)] Creating new record..."
|
|
RESP="$(curl -sf -X POST \
|
|
"https://api.porkbun.com/api/json/v3/dns/create/${DOMAIN}" \
|
|
-H 'Content-Type: application/json' \
|
|
-d "{\"apikey\":\"$PORKBUN_API_KEY\",\"secretapikey\":\"$PORKBUN_SECRET_KEY\",\"type\":\"A\",\"name\":\"$RECORD_NAME\",\"content\":\"$WAN_IP\",\"ttl\":$TTL}")"
|
|
else
|
|
# Update existing single record
|
|
echo "[$(timestamp)] Updating record ID $RECORD_ID..."
|
|
RESP="$(curl -sf -X POST \
|
|
"https://api.porkbun.com/api/json/v3/dns/edit/${DOMAIN}/${RECORD_ID}" \
|
|
-H 'Content-Type: application/json' \
|
|
-d "{\"apikey\":\"$PORKBUN_API_KEY\",\"secretapikey\":\"$PORKBUN_SECRET_KEY\",\"type\":\"A\",\"name\":\"$RECORD_NAME\",\"content\":\"$WAN_IP\",\"ttl\":$TTL}")"
|
|
fi
|
|
|
|
echo "[$(timestamp)] Response: $(echo "$RESP" | jq -c .)"
|
|
echo "$RESP" | grep -q '"status":"SUCCESS"' && \
|
|
echo "[$(timestamp)] Update successful" || \
|
|
echo "[$(timestamp)] Update failed"
|
|
done |