From f8dbf7aef4f1b1648bd2980b62f2ef57d653e800 Mon Sep 17 00:00:00 2001
From: Andrew Cady <d@jerkface.net>
Date: Fri, 29 May 2020 08:49:19 -0400
Subject: renames

---
 etc/powerdns/add-zone                        | 42 +++++++++++++
 etc/powerdns/dyndns-command.sh               | 92 ++++++++++++++++++++++++++++
 etc/powerdns/fixperms.sh                     |  5 ++
 etc/powerdns/named.conf                      | 10 +++
 etc/powerdns/pdns.conf                       | 17 +++++
 etc/powerdns/pdns.d/bind.conf                |  2 +
 etc/powerdns/pdns.d/pdns.local.conf          |  3 +
 etc/powerdns/pdns.d/pdns.local.gsqlite3.conf |  8 +++
 etc/powerdns/powerdns.sqlite3                |  0
 etc/sources.list.d/pdns.list                 |  1 +
 10 files changed, 180 insertions(+)
 create mode 100755 etc/powerdns/add-zone
 create mode 100755 etc/powerdns/dyndns-command.sh
 create mode 100755 etc/powerdns/fixperms.sh
 create mode 100644 etc/powerdns/named.conf
 create mode 100644 etc/powerdns/pdns.conf
 create mode 100644 etc/powerdns/pdns.d/bind.conf
 create mode 100644 etc/powerdns/pdns.d/pdns.local.conf
 create mode 100644 etc/powerdns/pdns.d/pdns.local.gsqlite3.conf
 create mode 100644 etc/powerdns/powerdns.sqlite3
 create mode 100644 etc/sources.list.d/pdns.list

(limited to 'etc')

diff --git a/etc/powerdns/add-zone b/etc/powerdns/add-zone
new file mode 100755
index 0000000..d7f6a13
--- /dev/null
+++ b/etc/powerdns/add-zone
@@ -0,0 +1,42 @@
+#!/bin/sh
+
+usage() { echo "Usage: $0 <database.sqlite3> <domain>" >&2; exit ${1:-1}; }
+
+check_args()
+{
+	[ $# = 2 ] || usage 1
+	database=$1
+	domain=$2
+
+	[ -f "$database" ] || exit 1
+	[ -r "$database" ] || exit 2
+
+	case "$domain" in
+		-h|--help) exec 2>&1; usage 0 ;;
+		*\'*) usage 1 ;;
+		'') usage 1 ;;
+		*.) usage 1 ;;
+		*.*) ;;
+		*) [ "$ALLOW_TLD_ZONE" ] || usage 1 ;;
+	esac
+}
+
+add_zone()
+{
+	local database="$1" domain="$2" soa
+	soa="$domain hostmaster.$domain 1 10800 3600 604800 3600"
+	sqlite3 "$database" <<END
+	begin;
+		delete from domains where name='$domain' and type='NATIVE';
+		insert into domains (name, type) values ('$domain', 'NATIVE');
+
+		insert into records (domain_id, name,      content, type,  ttl, prio)
+		select               id,        '$domain', '$soa',  'SOA', 600, 1
+		from domains where name='$domain';
+	commit;
+END
+}
+
+check_args "$@"
+
+add_zone "$@"
diff --git a/etc/powerdns/dyndns-command.sh b/etc/powerdns/dyndns-command.sh
new file mode 100755
index 0000000..375d50b
--- /dev/null
+++ b/etc/powerdns/dyndns-command.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+
+die() { printf '%s\n' "$*" >&2; exit 1; }
+
+sql_string()
+{
+	printf '%s' "'${1//\'/\'\'}'"
+}
+
+powerdns_sqlite_add_replace_record()
+{
+	local sql_new_domain="$(sql_string "$1.$3")"
+	local sql_ip_address="$(sql_string "$2")"
+	local sql_domain="$(sql_string "$3")"
+	local record_type="$(sql_string "$4")"
+
+	DBDIR=/etc/powerdns
+	DBNAME=powerdns.sqlite3
+	DB=$DBDIR/$DBNAME
+
+	test -r $DB    && test -w $DB    || die "Wrong permissions on $DB"
+	test -r $DBDIR && test -w $DBDIR || die "Wrong permissions on $DBDIR"
+
+	sqlite3 $DB <<END
+${SQL_ECHO:+.echo on}
+BEGIN;
+	DELETE FROM records WHERE type=$record_type AND name=$sql_new_domain;
+
+	INSERT INTO records
+
+		(domain_id,
+		name,
+		type,
+		content,
+		ttl,
+		prio)
+
+		SELECT
+			id,
+			$sql_new_domain,
+			$record_type,
+			$sql_ip_address,
+			3600,
+			0
+		FROM domains
+		WHERE name=$sql_domain;
+COMMIT;
+END
+}
+
+add()
+{
+	local record_type
+	case "$2" in
+		*.*.*.*) record_type=A ;;
+		*:*) record_type=AAAA ;;
+		*) exit 1 ;;
+	esac
+
+	powerdns_sqlite_add_replace_record "$1" "$2" "$domain" "$record_type" \
+	&& printf '%s %s\n' "$1.$domain $2"
+}
+
+main()
+{
+	add "$subdomain" "$ip_address"
+
+	set -- $SSH_ORIGINAL_COMMAND
+	while [ $# -ge 2 ]; do
+		d=$1
+		ip=$2
+		shift 2
+
+		case "$d" in
+			*.*) continue;;
+		esac
+
+		add "$d.$subdomain" "$ip"
+	done
+}
+
+PEM_DEST=$HOME/public_rsync
+
+PATH=$HOME/bin:$PATH
+
+eval "$(samizdat-ssh-uid --copy-pem "$PEM_DEST")"
+
+domain=${SSH_CLIENT_DOMAIN}
+subdomain=${SSH_CLIENT_FINGERPRINT}
+ip_address=${SSH_CLIENT%% *}
+
+main "$@"
diff --git a/etc/powerdns/fixperms.sh b/etc/powerdns/fixperms.sh
new file mode 100755
index 0000000..4879313
--- /dev/null
+++ b/etc/powerdns/fixperms.sh
@@ -0,0 +1,5 @@
+#!/bin/sh
+set -ex
+set -- /etc/powerdns /etc/powerdns/powerdns.sqlite3*
+chown pdns.dyndns "$@"
+chmod ug+rw "$@"
diff --git a/etc/powerdns/named.conf b/etc/powerdns/named.conf
new file mode 100644
index 0000000..7b8f760
--- /dev/null
+++ b/etc/powerdns/named.conf
@@ -0,0 +1,10 @@
+# Debian default: supermaster created zones are written here:
+include "/var/lib/powerdns/supermaster.conf";
+
+# Example for a manually configured slave zone:
+#
+# zone "example.net" {
+#   file "/var/lib/powerdns/zones.slave.d/example.net.zone";
+#   type slave;
+#   masters { 192.0.2.53; };
+# };
diff --git a/etc/powerdns/pdns.conf b/etc/powerdns/pdns.conf
new file mode 100644
index 0000000..50ffa39
--- /dev/null
+++ b/etc/powerdns/pdns.conf
@@ -0,0 +1,17 @@
+# config-dir=/etc/powerdns
+# include-dir=/etc/powerdns/pdns.d
+
+local-address=0.0.0.0
+setgid=pdns
+setuid=pdns
+
+launch=tinydns
+tinydns-dbfile=/etc/powerdns/tinydns.cdb
+
+launch+=gsqlite3
+gsqlite3-database=/etc/powerdns/powerdns.sqlite3
+gsqlite3-dnssec=yes
+
+master
+daemon=yes
+guardian=yes
diff --git a/etc/powerdns/pdns.d/bind.conf b/etc/powerdns/pdns.d/bind.conf
new file mode 100644
index 0000000..01775c1
--- /dev/null
+++ b/etc/powerdns/pdns.d/bind.conf
@@ -0,0 +1,2 @@
+launch+=bind
+bind-config=/etc/powerdns/named.conf
diff --git a/etc/powerdns/pdns.d/pdns.local.conf b/etc/powerdns/pdns.d/pdns.local.conf
new file mode 100644
index 0000000..3616b88
--- /dev/null
+++ b/etc/powerdns/pdns.d/pdns.local.conf
@@ -0,0 +1,3 @@
+# Here come the local changes the user made, like configuration of 
+# the several backends that exist.
+
diff --git a/etc/powerdns/pdns.d/pdns.local.gsqlite3.conf b/etc/powerdns/pdns.d/pdns.local.gsqlite3.conf
new file mode 100644
index 0000000..ccde43f
--- /dev/null
+++ b/etc/powerdns/pdns.d/pdns.local.gsqlite3.conf
@@ -0,0 +1,8 @@
+# Configuration for gsqlite
+#
+# Launch gsqlite3
+launch+=gsqlite3
+
+# Database location
+gsqlite3-database=/var/lib/powerdns/pdns.sqlite3
+gsqlite3-dnssec=on
diff --git a/etc/powerdns/powerdns.sqlite3 b/etc/powerdns/powerdns.sqlite3
new file mode 100644
index 0000000..e69de29
diff --git a/etc/sources.list.d/pdns.list b/etc/sources.list.d/pdns.list
new file mode 100644
index 0000000..795d281
--- /dev/null
+++ b/etc/sources.list.d/pdns.list
@@ -0,0 +1 @@
+deb http://repo.powerdns.com/debian stretch-auth-42 main
-- 
cgit v1.2.3