#!/usr/bin/env python3
import json
import re
import urllib.error
import urllib.request
import paramiko

PASS = "Bbt9115xty9176!"
CF = "https://api.cloudflare.com/client/v4"
ACCOUNT = "2599c23bbb1255dbb73e8d34b4115fda"
DOMAIN = "exposedgays.com"


def get_tokens():
    tokens = []
    try:
        c = paramiko.SSHClient()
        c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
        c.connect("10.10.0.1", username="admin", password=PASS, timeout=15)
        _, o, e = c.exec_command("cat /usr/local/etc/wan-dns-failover.env", timeout=30)
        o.channel.recv_exit_status()
        text = (o.read() + e.read()).decode()
        c.close()
        m = re.search(r"CLOUDFLARE_API_TOKEN=([^\s\"']+)", text)
        if m:
            tokens.append(("pfsense", m.group(1)))
    except Exception as ex:
        print("pfsense err", ex)

    try:
        c = paramiko.SSHClient()
        c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
        c.connect("10.10.0.10", username="localadministrator", password=PASS, timeout=30)
        for path in [
            "/home/localadministrator/coder/onsethost/.env.local",
            "/etc/infra/secrets.env",
            "/root/.env",
        ]:
            _, o, e = c.exec_command(
                f"grep CLOUDFLARE_API_TOKEN {path} 2>/dev/null | head -1", timeout=20
            )
            o.channel.recv_exit_status()
            line = (o.read() + e.read()).decode().strip()
            if line and "=" in line:
                tokens.append((path, line.split("=", 1)[1].strip().strip('"')))
        c.close()
    except Exception as ex:
        print("coolify err", ex)

    tokens += [
        ("apply_mail", "cfut_zlUt5lAKVsu7qIcRCHJnyhAvpJVF5jx24HlrIEn9a8fcd6a1"),
        ("onsethost", "cfut_IOm1DJW4pDkPCuQA6UoOjqO6Tcv2zU10y2PSw82m379f7db3"),
    ]
    return tokens


def call(tok, path, method="GET", body=None):
    req = urllib.request.Request(
        CF + path,
        data=json.dumps(body).encode() if body else None,
        method=method,
        headers={"Authorization": f"Bearer {tok}", "Content-Type": "application/json"},
    )
    try:
        with urllib.request.urlopen(req, timeout=45) as r:
            return json.load(r)
    except urllib.error.HTTPError as e:
        return json.loads(e.read().decode())


def main():
    for label, tok in get_tokens():
        v = call(tok, "/user/tokens/verify")
        print(f"[{label}] verify:", v.get("success"), v.get("errors"))
        z = call(tok, f"/zones?name={DOMAIN}")
        print(f"[{label}] zone:", z.get("success"), len(z.get("result") or []), z.get("errors"))
        c = call(
            tok,
            "/zones",
            "POST",
            {"name": DOMAIN, "account": {"id": ACCOUNT}, "type": "full", "jump_start": False},
        )
        print(f"[{label}] create:", c.get("success"), c.get("errors"))
        if c.get("success"):
            print("  NS:", c["result"].get("name_servers"))
            print("  status:", c["result"].get("status"))


if __name__ == "__main__":
    main()