阿里云 aliyun certbot-renew-hook

certbot-renew-hook.ts

import { DescribeDomainRecordsRequest, DescribeDomainRecordsResponseBodyDomainRecordsRecord, UpdateDomainRecordRequest } from '@alicloud/alidns20150109';
import client from './client'

const { CERTBOT_VALIDATION, CERTBOT_REMAINING_CHALLENGES, CERTBOT_DOMAIN, CERTBOT_ALL_DOMAINS } = process.env
console.log({ CERTBOT_VALIDATION, CERTBOT_REMAINING_CHALLENGES, CERTBOT_DOMAIN })

async function getConfiguredTXTRecord() {
  const describeDomainRecordsRequest = new DescribeDomainRecordsRequest({});
  describeDomainRecordsRequest.domainName = CERTBOT_DOMAIN;
  describeDomainRecordsRequest.type = "TXT";
  describeDomainRecordsRequest.RRKeyWord = "_acme-challenge";
  describeDomainRecordsRequest.status = "Enable";
  const response = await client.describeDomainRecords(describeDomainRecordsRequest)
  const { domainRecords } = response.body;
  return domainRecords?.record?.[0];
}

async function update(record: DescribeDomainRecordsResponseBodyDomainRecordsRecord) {

  const updateDomainRecordRequest = new UpdateDomainRecordRequest({})
  updateDomainRecordRequest.recordId = record.recordId;
  updateDomainRecordRequest.RR = record.RR;
  updateDomainRecordRequest.type = record.type;
  updateDomainRecordRequest.value = CERTBOT_VALIDATION;

  const response = await client.updateDomainRecord(updateDomainRecordRequest)
  const { recordId } = response.body;
  console.log(`Record ${recordId} updated`)
}

async function main() {
  const record = await getConfiguredTXTRecord()
  if (!record) {
    return console.log('todo add TXT')
  }
  console.log(record)
  await update(record)
}
main()

client.ts

import Alidns20150109 from '@alicloud/alidns20150109';
import { Config } from '@alicloud/openapi-client';

const config = new Config({
  accessKeyId: "xxx",
  accessKeySecret: "xxx",
});
// 访问的域名
config.endpoint = `alidns.cn-hangzhou.aliyuncs.com`;
export default new Alidns20150109(config);