view mod_dnsupdate/mod_dnsupdate.lua @ 6413:0703ef9f8db8

mod_dnsupdate: Support multiple hosts/components
author Kim Alvefur <zash@zash.se>
date Mon, 23 Feb 2026 16:22:33 +0100
parents 3ae0d518b739
children
line wrap: on
line source

module:set_global();

local config = require "core.configmanager";
local modulemanager = require "core.modulemanager";
local argparse = require "util.argparse";
local dns = require"net.adns".resolver();
local async = require "util.async";
local set = require "util.set";
local nameprep = require"util.encodings".stringprep.nameprep;
local idna_to_ascii = require"util.encodings".idna.to_ascii;

local services = { "xmpp-client"; "xmpps-client"; "xmpp-server"; "xmpps-server" }

local function validate_dnsname_option(options, option_name, default)
	local host = options[option_name];
	if host == nil then return default end
	local normalized = nameprep(host);
	if not normalized then
		module:log("error", "--%s %q fails normalization");
		return;
	end
	local alabel = idna_to_ascii(normalized);
	if not alabel then
		module:log("error", "--%s %q fails IDNA");
		return;
	end
	return alabel;
end

function module.command(arg)
	local opts = argparse.parse(arg, {
		short_params = { d = "domain"; p = "primary"; t = "target"; l = "ttl"; h = "help"; ["?"] = "help" };
		value_params = { domain = true; primary = true; target = true; ttl = true };
	});

	if not arg[1] or not opts or opts.help or not opts.domain then
		local out = opts.help and io.stdout or io.stderr;
		out:write("prosodyctl mod_dnsupdate [options] virtualhost\n");
		out:write("\t-d --domain\tbase domain name *required*\n");
		out:write("\t-p --primary\tprimary DNS name server\n");
		out:write("\t-t --target\ttarget hostname for SRV\n");
		out:write("\t-l --ttl\tTTL to use\n");
		out:write("\t--each\tremove and replace individual SRV records\n");
		out:write("\t--reset\tremove and replace all SRV records\n");
		out:write("\t--remove\tremove all SRV records\n");
		return opts and opts.help and 0 or 1;
	end

	local domain = validate_dnsname_option(opts, "domain");
	if not domain then
		module:log("error", "--domain is required");
		return 1;
	end
	local primary = validate_dnsname_option(opts, "primary")
		or async.wait_for(dns:lookup_promise(domain, "SOA"):next(function(ret) return ret[1].soa.mname; end));
	if not primary then
		module:log("error", "Could not discover primary name server, specify it with --primary");
		return 1;
	end

	print("zone", domain);
	print("server", primary);
	print("ttl " .. tostring(opts.ttl or 60 * 60));

	for _, vhost in ipairs(arg) do
		if not vhost then
			module:log("error", "Host %q fails normalization", arg[1]);
			return 1;
		end
		local ihost = idna_to_ascii(vhost);
		if not ihost then
			module:log("error", "Host %q fails IDNA", vhost);
			return 1;
		end
		if not config.get(vhost, "component_module") and not config.get(vhost, "defined") then
			module:log("error", "Host %q is not defined in the config", vhost);
			return 1;
		end

		local target = validate_dnsname_option(opts, "target", module:context(vhost):get_option_string("xmpp_host", ihost));
		-- TODO validate that target has A/AAAA

		local configured_ports = {
			["xmpp-client"] = module:get_option_array("c2s_ports", { 5222 });
			["xmpp-server"] = module:get_option_array("s2s_ports", { 5269 });
			["xmpps-client"] = module:get_option_array("c2s_direct_tls_ports", {});
			["xmpps-server"] = module:get_option_array("s2s_direct_tls_ports", {});
		};

		local modules_enabled = modulemanager.get_modules_for_host(vhost);
		if not modules_enabled:contains("c2s") then
			configured_ports["xmpp-client"] = {};
			configured_ports["xmpps-client"] = {};
		end
		if not modules_enabled:contains("s2s") then
			configured_ports["xmpp-server"] = {};
			configured_ports["xmpps-server"] = {};
		end

		if modules_enabled:contains("net_multiplex") then
			for opt, ports in pairs(configured_ports) do
				ports:append(module:get_option_array(opt:sub(1, 5) == "xmpps" and "ssl_ports" or "ports", {}));
			end
		end

		local existing_srv = {};
		for _, service in ipairs(services) do
			existing_srv[service] = dns:lookup_promise(("_%s._tcp.%s"):format(service, ihost), "SRV");
		end

		for _, service in ipairs(services) do
			local config_ports = set.new(configured_ports[service]);
			local dns_ports = set.new();

			if (opts.reset or opts.remove) and not opts.each then
				print(("del _%s._tcp.%s IN SRV"):format(service, ihost));
			else
				local records = (async.wait_for(existing_srv[service]));
				for _, rr in ipairs(records) do
					if target == nameprep(rr.srv.target):gsub("%.$", "") then
						dns_ports:add(rr.srv.port)
					elseif opts.each then
						print(("del _%s._tcp.%s IN SRV %s"):format(service, ihost, rr));
					end
				end
			end

			if not opts.remove then
				if config_ports:empty() then
					print(("add _%s._tcp.%s IN SRV 0 0 0 ."):format(service, ihost));
				else
					for port in (config_ports - dns_ports) do
						print(("add _%s._tcp.%s IN SRV 1 1 %d %s"):format(service, ihost, port, target));
					end
				end
			end
		end
	end

	print("show");
	print("send");
	print("answer");
end