131 lines
3.3 KiB
Go
131 lines
3.3 KiB
Go
package main
|
|
|
|
import (
|
|
"encoding/json"
|
|
"flag"
|
|
"fmt"
|
|
"log"
|
|
"os"
|
|
"os/signal"
|
|
"syscall"
|
|
|
|
"github.com/darkhal/autarch-dns/api"
|
|
"github.com/darkhal/autarch-dns/config"
|
|
"github.com/darkhal/autarch-dns/server"
|
|
"github.com/darkhal/autarch-dns/web"
|
|
)
|
|
|
|
var version = "2.2.0"
|
|
|
|
func main() {
|
|
configPath := flag.String("config", "config.json", "Path to config file")
|
|
listenDNS := flag.String("dns", "", "DNS listen address (overrides config)")
|
|
listenAPI := flag.String("api", "", "API listen address (overrides config)")
|
|
apiToken := flag.String("token", "", "API auth token (overrides config)")
|
|
webListen := flag.String("web", "", "WebUI listen address (default: 0.0.0.0:8443)")
|
|
webRoot := flag.String("webroot", "webroot", "WebUI static files directory")
|
|
webUser := flag.String("web-user", "admin", "WebUI username")
|
|
webPass := flag.String("web-pass", "", "WebUI password (hashed if 64 hex chars, else plaintext)")
|
|
tlsCert := flag.String("tls-cert", "", "TLS certificate for WebUI")
|
|
tlsKey := flag.String("tls-key", "", "TLS private key for WebUI")
|
|
showVersion := flag.Bool("version", false, "Show version")
|
|
flag.Parse()
|
|
|
|
if *showVersion {
|
|
fmt.Printf("autarch-dns v%s\n", version)
|
|
os.Exit(0)
|
|
}
|
|
|
|
// Load config
|
|
cfg := config.DefaultConfig()
|
|
if data, err := os.ReadFile(*configPath); err == nil {
|
|
if err := json.Unmarshal(data, cfg); err != nil {
|
|
log.Printf("Warning: invalid config file: %v", err)
|
|
}
|
|
}
|
|
|
|
// CLI overrides
|
|
if *listenDNS != "" {
|
|
cfg.ListenDNS = *listenDNS
|
|
}
|
|
if *listenAPI != "" {
|
|
cfg.ListenAPI = *listenAPI
|
|
}
|
|
if *apiToken != "" {
|
|
cfg.APIToken = *apiToken
|
|
}
|
|
|
|
// Initialize zone store
|
|
store := server.NewZoneStore(cfg.ZonesDir)
|
|
if err := store.LoadAll(); err != nil {
|
|
log.Printf("Warning: loading zones: %v", err)
|
|
}
|
|
|
|
// Start DNS server
|
|
dnsServer := server.NewDNSServer(cfg, store)
|
|
go func() {
|
|
log.Printf("DNS server listening on %s (UDP+TCP)", cfg.ListenDNS)
|
|
if err := dnsServer.Start(); err != nil {
|
|
log.Fatalf("DNS server error: %v", err)
|
|
}
|
|
}()
|
|
|
|
// Start API server (internal, localhost only)
|
|
apiServer := api.NewAPIServer(cfg, store, dnsServer)
|
|
go func() {
|
|
log.Printf("API server listening on %s", cfg.ListenAPI)
|
|
if err := apiServer.Start(); err != nil {
|
|
log.Fatalf("API server error: %v", err)
|
|
}
|
|
}()
|
|
|
|
// Start WebUI server
|
|
webListenAddr := "0.0.0.0:8443"
|
|
if *webListen != "" {
|
|
webListenAddr = *webListen
|
|
}
|
|
|
|
// Handle password — if it looks like a hash (64 hex chars), use directly
|
|
passwordHash := ""
|
|
if *webPass != "" {
|
|
if len(*webPass) == 64 {
|
|
passwordHash = *webPass
|
|
} else {
|
|
passwordHash = web.HashPassword(*webPass)
|
|
}
|
|
}
|
|
|
|
if passwordHash != "" {
|
|
webCfg := web.WebUIConfig{
|
|
Listen: webListenAddr,
|
|
Username: *webUser,
|
|
PasswordHash: passwordHash,
|
|
WebRoot: *webRoot,
|
|
APIBackend: "http://" + cfg.ListenAPI,
|
|
APIToken: cfg.APIToken,
|
|
TLSCert: *tlsCert,
|
|
TLSKey: *tlsKey,
|
|
SessionTTL: 3600,
|
|
}
|
|
|
|
webServer := web.NewWebUIServer(webCfg)
|
|
go func() {
|
|
if err := webServer.Start(); err != nil {
|
|
log.Fatalf("WebUI server error: %v", err)
|
|
}
|
|
}()
|
|
} else {
|
|
log.Println("WebUI disabled — set -web-pass to enable")
|
|
}
|
|
|
|
log.Printf("autarch-dns v%s started", version)
|
|
|
|
// Wait for shutdown signal
|
|
sig := make(chan os.Signal, 1)
|
|
signal.Notify(sig, syscall.SIGINT, syscall.SIGTERM)
|
|
<-sig
|
|
|
|
log.Println("Shutting down...")
|
|
dnsServer.Stop()
|
|
}
|