#!/usr/bin/env python3
import json, re, urllib.request, urllib.error, paramiko
PASS = "Bbt9115xty9176!"
ACCOUNT = "2599c23bbb1255dbb73e8d34b4115fda"
TUNNEL = "03079a26-f14c-4622-b463-ba54a24f7472"
ZID = "b9e032992b315331c8b0571473fedc89"
CF = "https://api.cloudflare.com/client/v4"

c = paramiko.SSHClient(); c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
c.connect("10.10.0.1", username="admin", password=PASS, timeout=15)
_, o, e = c.exec_command("cat /usr/local/etc/wan-dns-failover.env", timeout=30)
o.channel.recv_exit_status()
TOK = re.search(r"CLOUDFLARE_API_TOKEN=([^\s\"']+)", (o.read()+e.read()).decode()).group(1)
c.close()

def call(path):
    req = urllib.request.Request(CF+path, headers={"Authorization": f"Bearer {TOK}", "Content-Type": "application/json"})
    try:
        with urllib.request.urlopen(req, timeout=30) as r: return json.load(r)
    except urllib.error.HTTPError as e: return json.loads(e.read().decode())

for path in [
    f"/accounts/{ACCOUNT}/cfd_tunnel/{TUNNEL}/routes?per_page=100",
    f"/accounts/{ACCOUNT}/cfd_tunnel/{TUNNEL}",
    f"/zones/{ZID}/dns_records?per_page=50",
]:
    res = call(path)
    print(f"\n{path}")
    print("success=", res.get("success"), "errors=", res.get("errors"))
    if "dns_records" in path or "routes" in path:
        for item in res.get("result", []):
            if "exposedgays" in str(item):
                print(" ", json.dumps(item)[:300])