feat: add diagnostic and management scripts for DNS, NPM, and cluster infrastructure

2026-11-06 19:08:19 -05:00
parent 8e1c5f1e66
commit d5c2f6eae5
19 changed files with 559 additions and 8 deletions
--- a/scripts/populate_technitium_complete.py
+++ b/scripts/populate_technitium_complete.py
@@ -0,0 +1,148 @@
+import urllib.request
+import urllib.parse
+import ssl
+import json
+import sys
+
+sys.stdout.reconfigure(encoding='utf-8')
+
+ctx = ssl.create_default_context()
+ctx.check_hostname = False
+ctx.verify_mode = ssl.CERT_NONE
+
+A_RECORDS = [
+    # Gateways
+    ("gateway", "140.44.4.1"),
+    ("udm", "140.44.4.1"),
+    ("gateway-lan", "14.44.4.1"),
+    ("gateway-mgmt", "140.44.44.1"),
+    ("gateway-storage", "14.10.10.1"),
+    ("gateway-smarthome", "14.4.4.1"),
+    ("gateway-media", "192.168.1.1"),
+
+    # VIPs
+    ("npm", "140.44.4.70"),
+    ("npm-vip", "140.44.4.70"),
+    ("*", "140.44.4.70"),  # Wildcard for all reverse-proxied services
+    ("aero-traefik", "140.44.4.34"),
+    ("space-traefik", "140.44.4.62"),
+    ("dns1", "140.44.4.36"),
+    ("pihole1", "140.44.4.36"),
+    ("dns2", "140.44.4.65"),
+    ("pihole2", "140.44.4.65"),
+
+    # Storage
+    ("sn-nas", "14.10.10.71"),
+    ("snarfnas", "14.10.10.72"),
+
+    # Aerodrome Control Plane
+    ("sninfr2lnxctl01", "140.44.4.11"),
+    ("sninfr2lnxctl02", "140.44.4.12"),
+    ("sninfr2lnxctl03", "140.44.4.13"),
+
+    # Aerodrome Workers
+    ("sninfr2lnxwrk01", "140.44.4.21"),
+    ("sninfr2lnxwrk02", "140.44.4.22"),
+    ("sninfr2lnxwrk03", "140.44.4.23"),
+    ("sninfr2lnxwrk04", "140.44.4.24"),
+    ("sninfr2lnxwrk05", "140.44.4.25"),
+    ("sninfr2lnxwrk06", "140.44.4.26"),
+    ("sninfr2lnxwrk07", "140.44.4.27"),
+
+    # Spaceport Control Plane
+    ("sninfr0lnxctl01", "140.44.4.41"),
+    ("sninfr0lnxctl02", "140.44.4.42"),
+    ("sninfr0lnxctl03", "140.44.4.43"),
+    ("sninfr0lnxctl04", "140.44.4.44"),
+
+    # Spaceport Workers
+    ("sninfr0lnxwrk01", "140.44.4.51"),
+    ("sninfr0lnxwrk02", "140.44.4.52"),
+    ("sninfr0lnxwrk03", "140.44.4.53"),
+    ("sninfr0lnxwrk04", "140.44.4.54"),
+    ("sninfr0lnxwrk05", "140.44.4.55"),
+    ("sninfr0lnxwrk06", "140.44.4.56"),
+
+    # Swarm Node
+    ("sninfr1lnxctl01", "140.44.4.71"),
+
+    # Harvester
+    ("spacedock", "140.44.4.90"),
+]
+
+PTR_ZONES = [
+    "4.44.140.in-addr.arpa",
+    "44.44.140.in-addr.arpa",
+    "10.10.14.in-addr.arpa",
+    "4.44.14.in-addr.arpa",
+    "4.4.14.in-addr.arpa",
+    "1.168.192.in-addr.arpa",
+]
+
+def get_token(host):
+    url = f"https://{host}/api/user/login?user=admin&pass=snarfnetadmin&includeInfo=true"
+    with urllib.request.urlopen(urllib.request.Request(url), context=ctx, timeout=8) as resp:
+        return json.loads(resp.read().decode())['token']
+
+def provision_server(host):
+    print(f"\n=======================================================")
+    print(f"Provisioning Technitium on {host}...")
+    token = get_token(host)
+    print(f"Token acquired for {host}")
+
+    # 1. Create Forward Zone snarfnet.net
+    create_zone_url = f"https://{host}/api/zones/create?token={token}&zone=snarfnet.net&type=Primary"
+    try:
+        with urllib.request.urlopen(urllib.request.Request(create_zone_url), context=ctx, timeout=8) as resp:
+            print(f"  ✓ Created forward zone snarfnet.net on {host}")
+    except urllib.error.HTTPError as e:
+        err = e.read().decode()
+        if "already exists" in err:
+            print(f"  - Forward zone snarfnet.net already exists on {host}")
+        else:
+            print(f"  ✗ Error creating snarfnet.net: {err}")
+
+    # 2. Create Reverse PTR Zones
+    for z in PTR_ZONES:
+        cz_url = f"https://{host}/api/zones/create?token={token}&zone={z}&type=Primary"
+        try:
+            with urllib.request.urlopen(urllib.request.Request(cz_url), context=ctx, timeout=8) as resp:
+                print(f"  ✓ Created reverse zone {z} on {host}")
+        except urllib.error.HTTPError as e:
+            err = e.read().decode()
+            if "already exists" in err:
+                print(f"  - Reverse zone {z} already exists on {host}")
+            else:
+                print(f"  ✗ Error creating reverse zone {z}: {err}")
+
+    # 3. Add A records + Auto PTR
+    print(f"\nAdding {len(A_RECORDS)} authoritative records on {host}...")
+    added = 0
+    for name, ip in A_RECORDS:
+        domain = f"{name}.snarfnet.net" if name != "@" else "snarfnet.net"
+        # Don't create PTR for wildcard
+        use_ptr = "false" if name == "*" else "true"
+
+        params = {
+            "token": token,
+            "domain": domain,
+            "zone": "snarfnet.net",
+            "type": "A",
+            "ipAddress": ip,
+            "ptr": use_ptr,
+            "overwrite": "true",
+            "ttl": 3600
+        }
+        add_url = f"https://{host}/api/zones/records/add?{urllib.parse.urlencode(params)}"
+        try:
+            with urllib.request.urlopen(urllib.request.Request(add_url), context=ctx, timeout=8) as resp:
+                added += 1
+        except Exception as e:
+            print(f"  ✗ Failed adding {domain} -> {ip}: {e}")
+
+    print(f"  ✓ Successfully added/updated {added} A and PTR records on {host}")
+
+provision_server("dns1.snarfnet.net")
+provision_server("dns2.snarfnet.net")
+print("\nDone provisioning both Technitium DNS servers!")
+