114 lines
3.6 KiB
Bash
114 lines
3.6 KiB
Bash
#!/usr/bin/env dash
|
|
|
|
# router.sh — POSIX sh HTTP backend (for socat)
|
|
# usage: socat -T5 -t5 TCP-LISTEN:${port},reuseaddr,fork EXEC:"sh ${currentfile}"
|
|
# Routes:
|
|
# GET /status -> check $URLS (0/0 if unset)
|
|
# GET /disk -> check $VOLUMES (all if unset)
|
|
# Env:
|
|
# URLS="http://..." # default: none
|
|
# VOLUMES="/ /home" # default: all from df -P
|
|
# TIMEOUT=5
|
|
# AUTH_FILE="/path/htpasswd-like" # lines: user:pass
|
|
|
|
: "${TIMEOUT:=5}"
|
|
: "${VOLUMES:=$(df -P | awk 'NR>1{print $6}')}"
|
|
|
|
route_status() {
|
|
if [ -z "${URLS:-}" ]; then
|
|
printf '{"checks":[],"summary":{"total":0,"ok":0}}'
|
|
return
|
|
fi
|
|
{
|
|
printf '{"checks":['
|
|
first=1 okcnt=0 tot=0
|
|
for u in $URLS; do
|
|
tot=$((tot+1))
|
|
res=$(curl -sS -m "$TIMEOUT" -o /dev/null -w '%{http_code} %{time_total}' "$u" 2>/dev/null) || res="000 0"
|
|
code=${res%% *}; ttot=${res#* }
|
|
case $code in 2*|3*) ok=true; okcnt=$((okcnt+1));; *) ok=false;; esac
|
|
[ $first -eq 0 ] && printf ','; first=0
|
|
printf '{"url":"%s","code":%s,"time_s":%s,"ok":%s}' "$u" "$code" "$ttot" "$ok"
|
|
done
|
|
printf '],"summary":{"total":%s,"ok":%s}}' "$tot" "$okcnt"
|
|
}
|
|
}
|
|
|
|
route_disk() {
|
|
{
|
|
printf '{"volumes":['
|
|
first=1
|
|
for v in $VOLUMES; do
|
|
# POSIX df -P: Filesystem 1K-blocks Used Available Capacity Mounted on
|
|
# shellcheck disable=SC2046
|
|
set -- $(df -P "$v" 2>/dev/null | awk 'NR==2{print $2, $3, $4, $5, $6}')
|
|
size=$1 used=$2 avail=$3 usep=$4 mnt=$5
|
|
[ -z "$size" ] && continue
|
|
[ $first -eq 0 ] && printf ','; first=0
|
|
printf '{"mount":"%s","size_blocks":%s,"used":%s,"avail":%s,"use_percent":"%s"}' \
|
|
"$mnt" "$size" "$used" "$avail" "$usep"
|
|
done
|
|
printf ']}'
|
|
}
|
|
}
|
|
|
|
AUTH_TOKENS=""
|
|
if [ -n "${AUTH_FILE:-}" ] && [ -r "$AUTH_FILE" ]; then
|
|
while IFS= read -r up || [ -n "$up" ]; do
|
|
[ -n "$up" ] || continue
|
|
AUTH_TOKENS="$AUTH_TOKENS $(base64 encode "$up" | tail -n1)"
|
|
done <"$AUTH_FILE"
|
|
fi
|
|
|
|
require_auth=false
|
|
[ -n "$AUTH_TOKENS" ] && require_auth=true
|
|
|
|
# --- read request & headers ---
|
|
IFS= read -r req || exit 0
|
|
cr=$(printf '\r')
|
|
while IFS= read -r line; do
|
|
[ -z "$line" ] && break
|
|
[ "$line" = "$cr" ] && break
|
|
case "$line" in
|
|
"Authorization: Basic "*)
|
|
tok=${line#Authorization: Basic }
|
|
tok=$(printf '%s' "$tok" | tr -d '\r\n')
|
|
expect=$(base64 encode "$USER:$PASS")
|
|
[ "$tok" = "$expect" ] && auth_ok=true
|
|
;;
|
|
esac
|
|
done
|
|
|
|
# --- auth gate ---
|
|
unauth() {
|
|
body='{"error":"unauthorized"}'
|
|
len=$(printf '%s' "$body" | wc -c | awk '{print $1}')
|
|
printf 'HTTP/1.1 401 Unauthorized\r\n'
|
|
printf 'Content-Type: application/json\r\n'
|
|
printf 'Content-Length: %s\r\n' "$len"
|
|
printf 'WWW-Authenticate: Basic realm="minimal", charset="UTF-8"\r\n'
|
|
printf 'Connection: close\r\n\r\n'
|
|
printf '%s' "$body"
|
|
}
|
|
|
|
auth_ok=false
|
|
if $require_auth; then
|
|
for t in $AUTH_TOKENS; do
|
|
[ "$tok" = "$t" ] && auth_ok=true && break
|
|
done
|
|
$auth_ok || { unauth; exit 0; }
|
|
fi
|
|
|
|
tmp=$(mktemp) || exit 1
|
|
trap 'rm -f "$tmp"' EXIT INT HUP
|
|
|
|
case "$req" in
|
|
"GET /status "*) route_status >"$tmp"; status='200 OK'; ctype='application/json' ;;
|
|
"GET /disk "*) route_disk >"$tmp"; status='200 OK'; ctype='application/json' ;;
|
|
*) printf 'Not found\n' >"$tmp"; status='404 Not Found'; ctype='text/plain' ;;
|
|
esac
|
|
|
|
len=$(wc -c <"$tmp" | awk '{print $1}')
|
|
printf 'HTTP/1.1 %s\r\nContent-Type: %s\r\nContent-Length: %s\r\nConnection: close\r\n\r\n' "$status" "$ctype" "$len"
|
|
cat "$tmp"
|