fix(nixos): senttinèlla-probe: module args

2025-10-12 03:58:43 +00:00
parent 6dd7d112c5
commit dc6ca7a0a9
6 changed files with 152 additions and 46 deletions
--- a/package/sentinèlla/router.sh
+++ b/package/sentinèlla/router.sh
@@ -0,0 +1,113 @@
+#!/bin/dash
+
+# router.sh — POSIX sh HTTP backend (for socat)
+# usage: socat -T5 -t5 TCP-LISTEN:${port},reuseaddr,fork EXEC:"dash ${currentfile}"
+# Routes:
+#   GET /status  -> check $URLS (0/0 if unset)
+#   GET /disk    -> check $VOLUMES (all if unset)
+# Env:
+#   URLS="http://..."                # default: none
+#   VOLUMES="/ /home"                # default: all from df -P
+#   TIMEOUT=5
+#   AUTH_FILE="/path/htpasswd-like"  # lines: user:pass
+
+: "${TIMEOUT:=5}"
+: "${VOLUMES:=$(df -P | awk 'NR>1{print $6}')}"
+
+route_status() {
+    if [ -z "${URLS:-}" ]; then
+        printf '{"checks":[],"summary":{"total":0,"ok":0}}'
+        return
+    fi
+    {
+        printf '{"checks":['
+        first=1 okcnt=0 tot=0
+        for u in $URLS; do
+            tot=$((tot+1))
+            res=$(curl -sS -m "$TIMEOUT" -o /dev/null -w '%{http_code} %{time_total}' "$u" 2>/dev/null) || res="000 0"
+            code=${res%% *}; ttot=${res#* }
+            case $code in 2*|3*) ok=true; okcnt=$((okcnt+1));; *) ok=false;; esac
+            [ $first -eq 0 ] && printf ','; first=0
+            printf '{"url":"%s","code":%s,"time_s":%s,"ok":%s}' "$u" "$code" "$ttot" "$ok"
+        done
+        printf '],"summary":{"total":%s,"ok":%s}}' "$tot" "$okcnt"
+    }
+}
+
+route_disk() {
+    {
+        printf '{"volumes":['
+        first=1
+        for v in $VOLUMES; do
+	    # POSIX df -P: Filesystem 1K-blocks Used Available Capacity Mounted on
+	    # shellcheck disable=SC2046
+            set -- $(df -P "$v" 2>/dev/null | awk 'NR==2{print $2, $3, $4, $5, $6}')
+            size=$1 used=$2 avail=$3 usep=$4 mnt=$5
+            [ -z "$size" ] && continue
+            [ $first -eq 0 ] && printf ','; first=0
+            printf '{"mount":"%s","size_blocks":%s,"used":%s,"avail":%s,"use_percent":"%s"}' \
+              "$mnt" "$size" "$used" "$avail" "$usep"
+        done
+        printf ']}'
+    }
+}
+
+AUTH_TOKENS=""
+if [ -n "${AUTH_FILE:-}" ] && [ -r "$AUTH_FILE" ]; then
+  while IFS= read -r up || [ -n "$up" ]; do
+    [ -n "$up" ] || continue
+    AUTH_TOKENS="$AUTH_TOKENS $(base64 encode "$up" | tail -n1)"
+  done <"$AUTH_FILE"
+fi
+
+require_auth=false
+[ -n "$AUTH_TOKENS" ] && require_auth=true
+
+# --- read request & headers ---
+IFS= read -r req || exit 0
+cr=$(printf '\r')
+while IFS= read -r line; do
+  [ -z "$line" ] && break
+  [ "$line" = "$cr" ] && break
+  case "$line" in
+    "Authorization: Basic "*) 
+        tok=${line#Authorization: Basic }
+        tok=$(printf '%s' "$tok" | tr -d '\r\n')
+        expect=$(base64 encode "$USER:$PASS")
+        [ "$tok" = "$expect" ] && auth_ok=true
+        ;;
+  esac
+done
+
+# --- auth gate ---
+unauth() {
+  body='{"error":"unauthorized"}'
+  len=$(printf '%s' "$body" | wc -c | awk '{print $1}')
+  printf 'HTTP/1.1 401 Unauthorized\r\n'
+  printf 'Content-Type: application/json\r\n'
+  printf 'Content-Length: %s\r\n' "$len"
+  printf 'WWW-Authenticate: Basic realm="minimal", charset="UTF-8"\r\n'
+  printf 'Connection: close\r\n\r\n'
+  printf '%s' "$body"
+}
+
+auth_ok=false
+if $require_auth; then
+  for t in $AUTH_TOKENS; do
+    [ "$tok" = "$t" ] && auth_ok=true && break
+  done
+  $auth_ok || { unauth; exit 0; }
+fi
+
+tmp=$(mktemp) || exit 1
+trap 'rm -f "$tmp"' EXIT INT HUP
+
+case "$req" in
+  "GET /status "*) route_status >"$tmp"; status='200 OK'; ctype='application/json' ;;
+  "GET /disk "*)   route_disk   >"$tmp"; status='200 OK'; ctype='application/json' ;;
+  *)               printf 'Not found\n' >"$tmp"; status='404 Not Found'; ctype='text/plain' ;;
+esac
+
+len=$(wc -c <"$tmp" | awk '{print $1}')
+printf 'HTTP/1.1 %s\r\nContent-Type: %s\r\nContent-Length: %s\r\nConnection: close\r\n\r\n' "$status" "$ctype" "$len"
+cat "$tmp"