feat: add baota panel deployer

internal/deployer/providers.go

@@ -18,6 +18,7 @@ import (
 	providerAliyunWAF "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/aliyun-waf"
 	providerAWSCloudFront "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/aws-cloudfront"
 	providerBaiduCloudCDN "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/baiducloud-cdn"
+	providerBaotaPanelSite "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/baotapanel-site"
 	providerBytePlusCDN "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/byteplus-cdn"
 	providerDogeCDN "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/dogecloud-cdn"
 	providerEdgioApplications "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/edgio-applications"
@@ -210,6 +211,21 @@ func createDeployer(options *deployerOptions) (deployer.Deployer, logger.Logger,
 			}
 		}
 
+	case domain.DeployProviderTypeBaotaPanelSite:
+		{
+			access := domain.AccessConfigForBaotaPanel{}
+			if err := maps.Decode(options.ProviderAccessConfig, &access); err != nil {
+				return nil, nil, fmt.Errorf("failed to decode provider access config: %w", err)
+			}
+
+			deployer, err := providerBaotaPanelSite.NewWithLogger(&providerBaotaPanelSite.BaotaPanelSiteDeployerConfig{
+				ApiUrl:   access.ApiUrl,
+				ApiKey:   access.ApiKey,
+				SiteName: maps.GetValueAsString(options.ProviderDeployConfig, "siteName"),
+			}, logger)
+			return deployer, logger, err
+		}
+
 	case domain.DeployProviderTypeBytePlusCDN:
 		{
 			access := domain.AccessConfigForBytePlus{}

internal/domain/access.go

@@ -54,6 +54,11 @@ type AccessConfigForBaiduCloud struct {
 	SecretAccessKey string `json:"secretAccessKey"`
 }
 
+type AccessConfigForBaotaPanel struct {
+	ApiUrl string `json:"apiUrl"`
+	ApiKey string `json:"apiKey"`
+}
+
 type AccessConfigForBytePlus struct {
 	AccessKey string `json:"accessKey"`
 	SecretKey string `json:"secretKey"`

internal/domain/provider.go

@@ -14,6 +14,7 @@ const (
 	AccessProviderTypeAWS          = AccessProviderType("aws")
 	AccessProviderTypeAzure        = AccessProviderType("azure")
 	AccessProviderTypeBaiduCloud   = AccessProviderType("baiducloud")
+	AccessProviderTypeBaotaPanel   = AccessProviderType("baotapanel")
 	AccessProviderTypeBytePlus     = AccessProviderType("byteplus")
 	AccessProviderTypeCloudflare   = AccessProviderType("cloudflare")
 	AccessProviderTypeClouDNS      = AccessProviderType("cloudns")
@@ -94,6 +95,7 @@ const (
 	DeployProviderTypeAliyunWAF             = DeployProviderType("aliyun-waf")
 	DeployProviderTypeAWSCloudFront         = DeployProviderType("aws-cloudfront")
 	DeployProviderTypeBaiduCloudCDN         = DeployProviderType("baiducloud-cdn")
+	DeployProviderTypeBaotaPanelSite        = DeployProviderType("baotapanel-site")
 	DeployProviderTypeBytePlusCDN           = DeployProviderType("byteplus-cdn")
 	DeployProviderTypeDogeCloudCDN          = DeployProviderType("dogecloud-cdn")
 	DeployProviderTypeEdgioApplications     = DeployProviderType("edgio-applications")

internal/pkg/core/deployer/providers/baotapanel-site/baotapanel-site.go

@@ -0,0 +1,81 @@
+package baotapanelsite
+
+import (
+	"context"
+	"errors"
+
+	xerrors "github.com/pkg/errors"
+
+	"github.com/usual2970/certimate/internal/pkg/core/deployer"
+	"github.com/usual2970/certimate/internal/pkg/core/logger"
+	btsdk "github.com/usual2970/certimate/internal/pkg/vendors/btpanel-sdk"
+)
+
+type BaotaPanelSiteDeployerConfig struct {
+	// 宝塔面板地址。
+	ApiUrl string `json:"apiUrl"`
+	// 宝塔面板接口密钥。
+	ApiKey string `json:"apiKey"`
+	// 站点名称
+	SiteName string `json:"siteName"`
+}
+
+type BaotaPanelSiteDeployer struct {
+	config    *BaotaPanelSiteDeployerConfig
+	logger    logger.Logger
+	sdkClient *btsdk.BaoTaPanelClient
+}
+
+var _ deployer.Deployer = (*BaotaPanelSiteDeployer)(nil)
+
+func New(config *BaotaPanelSiteDeployerConfig) (*BaotaPanelSiteDeployer, error) {
+	return NewWithLogger(config, logger.NewNilLogger())
+}
+
+func NewWithLogger(config *BaotaPanelSiteDeployerConfig, logger logger.Logger) (*BaotaPanelSiteDeployer, error) {
+	if config == nil {
+		return nil, errors.New("config is nil")
+	}
+
+	if logger == nil {
+		return nil, errors.New("logger is nil")
+	}
+
+	client, err := createSdkClient(config.ApiUrl, config.ApiKey)
+	if err != nil {
+		return nil, xerrors.Wrap(err, "failed to create sdk client")
+	}
+
+	return &BaotaPanelSiteDeployer{
+		logger:    logger,
+		config:    config,
+		sdkClient: client,
+	}, nil
+}
+
+func (d *BaotaPanelSiteDeployer) Deploy(ctx context.Context, certPem string, privkeyPem string) (*deployer.DeployResult, error) {
+	if d.config.SiteName == "" {
+		return nil, errors.New("config `siteName` is required")
+	}
+
+	// 设置站点 SSL 证书
+	setSiteSSLReq := &btsdk.SetSiteSSLRequest{
+		SiteName: d.config.SiteName,
+		Type:     "1",
+		Key:      privkeyPem,
+		Csr:      certPem,
+	}
+	setSiteSSLResp, err := d.sdkClient.SetSiteSSL(setSiteSSLReq)
+	if err != nil {
+		return nil, xerrors.Wrap(err, "failed to execute sdk request 'bt.SetSiteSSL'")
+	}
+
+	d.logger.Logt("已设置站点 SSL 证书", setSiteSSLResp)
+
+	return &deployer.DeployResult{}, nil
+}
+
+func createSdkClient(apiUrl, apiKey string) (*btsdk.BaoTaPanelClient, error) {
+	client := btsdk.NewBaoTaPanelClient(apiUrl, apiKey)
+	return client, nil
+}

internal/pkg/core/deployer/providers/baotapanel-site/baotapanel-site_test.go

@@ -0,0 +1,75 @@
+package baotapanelsite_test
+
+import (
+	"context"
+	"flag"
+	"fmt"
+	"os"
+	"strings"
+	"testing"
+
+	provider "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/baotapanel-site"
+)
+
+var (
+	fInputCertPath string
+	fInputKeyPath  string
+	fApiUrl        string
+	fApiKey        string
+	fSiteName      string
+)
+
+func init() {
+	argsPrefix := "CERTIMATE_DEPLOYER_BAOTAPANELSITE_"
+
+	flag.StringVar(&fInputCertPath, argsPrefix+"INPUTCERTPATH", "", "")
+	flag.StringVar(&fInputKeyPath, argsPrefix+"INPUTKEYPATH", "", "")
+	flag.StringVar(&fApiUrl, argsPrefix+"APIURL", "", "")
+	flag.StringVar(&fApiKey, argsPrefix+"APIKEY", "", "")
+	flag.StringVar(&fSiteName, argsPrefix+"SITENAME", "", "")
+}
+
+/*
+Shell command to run this test:
+
+	go test -v ./baotapanel_site_test.go -args \
+	--CERTIMATE_DEPLOYER_BAOTAPANELSITE_INPUTCERTPATH="/path/to/your-input-cert.pem" \
+	--CERTIMATE_DEPLOYER_BAOTAPANELSITE_INPUTKEYPATH="/path/to/your-input-key.pem" \
+	--CERTIMATE_DEPLOYER_BAOTAPANELSITE_APIURL="your-baota-panel-url" \
+	--CERTIMATE_DEPLOYER_BAOTAPANELSITE_APIKEY="your-baota-panel-key" \
+	--CERTIMATE_DEPLOYER_BAOTAPANELSITE_SITENAME="your-baota-site-name"
+*/
+func TestDeploy(t *testing.T) {
+	flag.Parse()
+
+	t.Run("Deploy", func(t *testing.T) {
+		t.Log(strings.Join([]string{
+			"args:",
+			fmt.Sprintf("INPUTCERTPATH: %v", fInputCertPath),
+			fmt.Sprintf("INPUTKEYPATH: %v", fInputKeyPath),
+			fmt.Sprintf("APIURL: %v", fApiUrl),
+			fmt.Sprintf("APIKEY: %v", fApiKey),
+			fmt.Sprintf("SITENAME: %v", fSiteName),
+		}, "\n"))
+
+		deployer, err := provider.New(&provider.BaotaPanelSiteDeployerConfig{
+			ApiUrl:   fApiUrl,
+			ApiKey:   fApiKey,
+			SiteName: fSiteName,
+		})
+		if err != nil {
+			t.Errorf("err: %+v", err)
+			return
+		}
+
+		fInputCertData, _ := os.ReadFile(fInputCertPath)
+		fInputKeyData, _ := os.ReadFile(fInputKeyPath)
+		res, err := deployer.Deploy(context.Background(), string(fInputCertData), string(fInputKeyData))
+		if err != nil {
+			t.Errorf("err: %+v", err)
+			return
+		}
+
+		t.Logf("ok: %v", res)
+	})
+}

internal/pkg/vendors/btpanel-sdk/api.go

@@ -0,0 +1,26 @@
+package btpanelsdk
+
+type BaseResponse interface {
+	GetStatus() *bool
+	GetMsg() *string
+}
+
+type SetSiteSSLRequest struct {
+	Type     string `json:"type"`
+	SiteName string `json:"siteName"`
+	Key      string `json:"key"`
+	Csr      string `json:"csr"`
+}
+
+type SetSiteSSLResponse struct {
+	Status *bool   `json:"status,omitempty"`
+	Msg    *string `json:"msg,omitempty"`
+}
+
+func (r *SetSiteSSLResponse) GetStatus() *bool {
+	return r.Status
+}
+
+func (r *SetSiteSSLResponse) GetMsg() *string {
+	return r.Msg
+}

internal/pkg/vendors/btpanel-sdk/client.go

@@ -0,0 +1,107 @@
+package btpanelsdk
+
+import (
+	"crypto/md5"
+	"encoding/hex"
+	"encoding/json"
+	"fmt"
+	"strings"
+	"time"
+
+	"github.com/go-resty/resty/v2"
+
+	"github.com/usual2970/certimate/internal/pkg/utils/maps"
+)
+
+type BaoTaPanelClient struct {
+	apiHost string
+	apiKey  string
+	client  *resty.Client
+}
+
+func NewBaoTaPanelClient(apiHost, apiKey string) *BaoTaPanelClient {
+	client := resty.New()
+
+	return &BaoTaPanelClient{
+		apiHost: apiHost,
+		apiKey:  apiKey,
+		client:  client,
+	}
+}
+
+func (c *BaoTaPanelClient) WithTimeout(timeout time.Duration) *BaoTaPanelClient {
+	c.client.SetTimeout(timeout)
+	return c
+}
+
+func (c *BaoTaPanelClient) SetSiteSSL(req *SetSiteSSLRequest) (*SetSiteSSLResponse, error) {
+	params := make(map[string]any)
+	jsonData, _ := json.Marshal(req)
+	json.Unmarshal(jsonData, &params)
+
+	result := SetSiteSSLResponse{}
+	err := c.sendRequestWithResult("/site?action=SetSSL", params, &result)
+	if err != nil {
+		return nil, err
+	}
+	return &result, nil
+}
+
+func (c *BaoTaPanelClient) generateSignature(timestamp string) string {
+	keyMd5 := md5.Sum([]byte(c.apiKey))
+	keyMd5Hex := strings.ToLower(hex.EncodeToString(keyMd5[:]))
+
+	signMd5 := md5.Sum([]byte(timestamp + keyMd5Hex))
+	signMd5Hex := strings.ToLower(hex.EncodeToString(signMd5[:]))
+	return signMd5Hex
+}
+
+func (c *BaoTaPanelClient) sendRequest(path string, params map[string]any) (*resty.Response, error) {
+	if params == nil {
+		params = make(map[string]any)
+	}
+
+	timestamp := time.Now().Unix()
+	params["request_time"] = timestamp
+	params["request_token"] = c.generateSignature(fmt.Sprintf("%d", timestamp))
+
+	url := strings.TrimRight(c.apiHost, "/") + path
+	req := c.client.R().
+		SetHeader("Content-Type", "application/json").
+		SetBody(params)
+	resp, err := req.Post(url)
+	if err != nil {
+		return nil, fmt.Errorf("baota: failed to send request: %w", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("baota: unexpected status code: %d, %s", resp.StatusCode(), resp.Body())
+	}
+
+	return resp, nil
+}
+
+func (c *BaoTaPanelClient) sendRequestWithResult(path string, params map[string]any, result BaseResponse) error {
+	resp, err := c.sendRequest(path, params)
+	if err != nil {
+		return err
+	}
+
+	jsonResp := make(map[string]any)
+	if err := json.Unmarshal(resp.Body(), &jsonResp); err != nil {
+		return fmt.Errorf("baota: failed to parse response: %w", err)
+	}
+	if err := maps.Decode(jsonResp, &result); err != nil {
+		return fmt.Errorf("baota: failed to parse response: %w", err)
+	}
+
+	if result.GetStatus() != nil && !*result.GetStatus() {
+		if result.GetMsg() == nil {
+			return fmt.Errorf("baota api error: unknown error")
+		} else {
+			return fmt.Errorf("baota api error: %s", result.GetMsg())
+		}
+	}
+
+	return nil
+}

internal/pkg/vendors/gname-sdk/client.go

@@ -130,11 +130,11 @@ func (c *GnameClient) sendRequest(path string, params map[string]any) (*resty.Re
 		SetFormData(data)
 	resp, err := req.Post(url)
 	if err != nil {
-		return nil, fmt.Errorf("failed to send request: %w", err)
+		return nil, fmt.Errorf("gname: failed to send request: %w", err)
 	}
 
 	if resp.IsError() {
-		return nil, fmt.Errorf("unexpected status code: %d, %s", resp.StatusCode(), resp.Body())
+		return nil, fmt.Errorf("gname: unexpected status code: %d, %s", resp.StatusCode(), resp.Body())
 	}
 
 	return resp, nil
@@ -148,14 +148,14 @@ func (c *GnameClient) sendRequestWithResult(path string, params map[string]any,
 
 	jsonResp := make(map[string]any)
 	if err := json.Unmarshal(resp.Body(), &jsonResp); err != nil {
-		return fmt.Errorf("failed to parse response: %w", err)
+		return fmt.Errorf("gname: failed to parse response: %w", err)
 	}
 	if err := maps.Decode(jsonResp, &result); err != nil {
-		return fmt.Errorf("failed to parse response: %w", err)
+		return fmt.Errorf("gname: failed to parse response: %w", err)
 	}
 
 	if result.GetCode() != 1 {
-		return fmt.Errorf("API error: %s", result.GetMsg())
+		return fmt.Errorf("gname api error: %s", result.GetMsg())
 	}
 
 	return nil