flarectl.go

package main

import (
	"os"

	cloudflare "github.com/cloudflare/cloudflare-go"
	"github.com/urfave/cli/v2"
)

var (
	version = "dev"     //nolint
	commit  = "none"    //nolint
	date    = "unknown" //nolint
	builtBy = "unknown" //nolint
)

var api *cloudflare.API

func main() {
	app := cli.NewApp()
	app.Name = "flarectl"
	app.Usage = "Cloudflare CLI"
	app.Version = version
	app.Flags = []cli.Flag{
		&cli.StringFlag{
			Name:    "account-id",
			Usage:   "Optional account ID",
			Value:   "",
			EnvVars: []string{"CF_ACCOUNT_ID"},
		},
		&cli.BoolFlag{
			Name:  "json",
			Usage: "show output as JSON instead of as a table",
		},
	}
	app.Commands = []*cli.Command{
		{
			Name:    "ips",
			Aliases: []string{"i"},
			Action:  ips,
			Usage:   "Print Cloudflare IP ranges",
			Flags: []cli.Flag{
				&cli.StringFlag{
					Name:  "ip-type",
					Usage: "type of IPs ( ipv4 | ipv6 | all )",
					Value: "all",
				},
				&cli.BoolFlag{
					Name:  "ip-only",
					Usage: "show only addresses",
				},
			},
		},
		{
			Name:    "user",
			Aliases: []string{"u"},
			Usage:   "User information",
			Before:  initializeAPI,
			Subcommands: []*cli.Command{
				{
					Name:    "info",
					Aliases: []string{"i"},
					Action:  userInfo,
					Usage:   "User details",
				},
				{
					Name:    "update",
					Aliases: []string{"u"},
					Action:  userUpdate,
					Usage:   "Update user details",
				},
			},
		},

		{
			Name:    "zone",
			Aliases: []string{"z"},
			Usage:   "Zone information",
			Before:  initializeAPI,
			Subcommands: []*cli.Command{
				{
					Name:    "list",
					Aliases: []string{"l"},
					Action:  zoneList,
					Usage:   "List all zones on an account",
				},
				{
					Name:    "create",
					Aliases: []string{"c"},
					Action:  zoneCreate,
					Usage:   "Create a new zone",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.BoolFlag{
							Name:  "jumpstart",
							Usage: "automatically fetch DNS records",
						},
						&cli.StringFlag{
							Name:  "account-id",
							Usage: "account ID",
						},
					},
				},
				{
					Name:   "delete",
					Action: zoneDelete,
					Usage:  "Delete a zone",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
					},
				},
				{
					Name:   "check",
					Action: zoneCheck,
					Usage:  "Initiate a zone activation check",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
					},
				},
				{
					Name:    "info",
					Aliases: []string{"i"},
					Action:  zoneInfo,
					Usage:   "Information on one zone",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
					},
				},
				{
					Name:    "lockdown",
					Aliases: []string{"lo"},
					Action:  zoneCreateLockdown,
					Usage:   "Lockdown a zone based on config",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.StringSliceFlag{
							Name:  "urls",
							Usage: "a list of [exact] URLs to lockdown",
						},
						&cli.StringSliceFlag{
							Name:  "targets",
							Usage: "a list of targets type",
						},
						&cli.StringSliceFlag{
							Name:  "values",
							Usage: "a list of values such as ip, ip_range etc.",
						},
					},
				},
				{
					Name:    "plan",
					Aliases: []string{"p"},
					Action:  zonePlan,
					Usage:   "Plan information for one zone",
				},
				{
					Name:    "settings",
					Aliases: []string{"s"},
					Action:  zoneSettings,
					Usage:   "Settings for one zone",
				},
				{
					Name:   "purge",
					Action: zoneCachePurge,
					Usage:  "(Selectively) Purge the cache for a zone",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.BoolFlag{
							Name:  "everything",
							Usage: "purge everything from cache for the zone",
						},
						&cli.StringSliceFlag{
							Name:  "hosts",
							Usage: "a list of hostnames to purge the cache for",
						},
						&cli.StringSliceFlag{
							Name:  "tags",
							Usage: "the cache tags to purge (Enterprise only)",
						},
						&cli.StringSliceFlag{
							Name:  "files",
							Usage: "a list of [exact] URLs to purge",
						},
						&cli.StringSliceFlag{
							Name:  "prefixes",
							Usage: "a list of host/path prefixes to purge",
						},
					},
				},
				{
					Name:    "dns",
					Aliases: []string{"d"},
					Action:  zoneRecords,
					Usage:   "DNS records for a zone",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
					},
				},
				{
					Name:    "railgun",
					Aliases: []string{"r"},
					Action:  zoneRailgun,
					Usage:   "Railguns for a zone",
				},
				{
					Name:    "certs",
					Aliases: []string{"c"},
					Action:  zoneCerts,
					Usage:   "Custom SSL certificates for a zone",
				},
				{
					Name:    "keyless",
					Aliases: []string{"k"},
					Action:  zoneKeyless,
					Usage:   "Keyless SSL for a zone",
				},
				{
					Name:    "export",
					Aliases: []string{"x"},
					Action:  zoneExport,
					Usage:   "Export DNS records for a zone",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
					},
				},
			},
		},

		{
			Name:    "dns",
			Aliases: []string{"d"},
			Usage:   "DNS records",
			Before:  initializeAPI,
			Subcommands: []*cli.Command{
				{
					Name:    "list",
					Aliases: []string{"l"},
					Action:  zoneRecords,
					Usage:   "List DNS records for a zone",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "id",
							Usage: "record id",
						},
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.StringFlag{
							Name:  "type",
							Usage: "record type",
						},
						&cli.StringFlag{
							Name:  "name",
							Usage: "record name",
						},
						&cli.StringFlag{
							Name:  "content",
							Usage: "record content",
						},
					},
				},
				{
					Name:    "create",
					Aliases: []string{"c"},
					Action:  dnsCreate,
					Usage:   "Create a DNS record",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.StringFlag{
							Name:  "name",
							Usage: "record name",
						},
						&cli.StringFlag{
							Name:  "type",
							Usage: "record type",
						},
						&cli.StringFlag{
							Name:  "content",
							Usage: "record content",
						},
						&cli.IntFlag{
							Name:  "ttl",
							Usage: "TTL (1 = automatic)",
							Value: 1,
						},
						&cli.BoolFlag{
							Name:  "proxy",
							Usage: "proxy through Cloudflare (orange cloud)",
						},
					},
				},
				{
					Name:    "update",
					Aliases: []string{"u"},
					Action:  dnsUpdate,
					Usage:   "Update a DNS record",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.StringFlag{
							Name:  "id",
							Usage: "record id",
						},
						&cli.StringFlag{
							Name:  "name",
							Usage: "record name",
						},
						&cli.StringFlag{
							Name:  "content",
							Usage: "record content",
						},
						&cli.StringFlag{
							Name:  "type",
							Usage: "record type",
						},
						&cli.IntFlag{
							Name:  "ttl",
							Usage: "TTL (1 = automatic)",
							Value: 1,
						},
						&cli.BoolFlag{
							Name:  "proxy",
							Usage: "proxy through Cloudflare (orange cloud)",
						},
					},
				},
				{
					Name:    "create-or-update",
					Aliases: []string{"o"},
					Action:  dnsCreateOrUpdate,
					Usage:   "Create a DNS record, or update if it exists",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.StringFlag{
							Name:  "name",
							Usage: "record name",
						},
						&cli.StringFlag{
							Name:  "content",
							Usage: "record content",
						},
						&cli.StringFlag{
							Name:  "type",
							Usage: "record type",
						},
						&cli.IntFlag{
							Name:  "ttl",
							Usage: "TTL (1 = automatic)",
							Value: 1,
						},
						&cli.BoolFlag{
							Name:  "proxy",
							Usage: "proxy through Cloudflare (orange cloud)",
						},
					},
				},
				{
					Name:    "delete",
					Aliases: []string{"d"},
					Action:  dnsDelete,
					Usage:   "Delete a DNS record",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.StringFlag{
							Name:  "id",
							Usage: "record id",
						},
					},
				},
			},
		},
		{
			Name:    "user-agents",
			Aliases: []string{"ua"},
			Usage:   "User-Agent blocking",
			Before:  initializeAPI,
			Subcommands: []*cli.Command{
				{
					Name:    "list",
					Aliases: []string{"l"},
					Action:  userAgentList,
					Usage:   "List User-Agent blocks for a zone",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.IntFlag{
							Name:  "page",
							Usage: "result page to return",
						},
					},
				},
				{
					Name:    "create",
					Aliases: []string{"c"},
					Action:  userAgentCreate,
					Usage:   "Create a User-Agent blocking rule",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.StringFlag{
							Name:  "mode",
							Usage: "the blocking mode: block, challenge, js_challenge, whitelist",
						},
						&cli.StringFlag{
							Name:  "value",
							Usage: "the exact User-Agent to block",
						},
						&cli.BoolFlag{
							Name:  "paused",
							Usage: "whether the rule should be paused (default: false)",
						},
						&cli.StringFlag{
							Name:  "description",
							Usage: "a description for the rule",
						},
					},
				},
				{
					Name:    "update",
					Aliases: []string{"u"},
					Action:  userAgentUpdate,
					Usage:   "Update an existing User-Agent block",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.StringFlag{
							Name:  "id",
							Usage: "User-Agent blocking rule ID",
						},
						&cli.StringFlag{
							Name:  "mode",
							Usage: "the blocking mode: block, challenge, js_challenge, whitelist",
						},
						&cli.StringFlag{
							Name:  "value",
							Usage: "the exact User-Agent to block",
						},
						&cli.BoolFlag{
							Name:  "paused",
							Usage: "whether the rule should be paused (default: false)",
						},
						&cli.StringFlag{
							Name:  "description",
							Usage: "a description for the rule",
						},
					},
				},
				{
					Name:    "delete",
					Aliases: []string{"d"},
					Action:  userAgentDelete,
					Usage:   "Delete a User-Agent block",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
						&cli.StringFlag{
							Name:  "id",
							Usage: "User-Agent blocking rule ID",
						},
					},
				},
			},
		},
		{
			Name:    "pagerules",
			Aliases: []string{"p"},
			Usage:   "Page Rules",
			Before:  initializeAPI,
			Subcommands: []*cli.Command{
				{
					Name:    "list",
					Aliases: []string{"l"},
					Action:  pageRules,
					Usage:   "List Page Rules for a zone",
					Flags: []cli.Flag{
						&cli.StringFlag{
							Name:  "zone",
							Usage: "zone name",
						},
					},
				},
			},
		},

		{
			Name:    "railgun",
			Aliases: []string{"r"},
			Usage:   "Railgun information",
			Before:  initializeAPI,
			Action:  railgun,
		},

		{
			Name:    "firewall",
			Aliases: []string{"f"},
			Usage:   "Firewall",
			Before:  initializeAPI,
			Subcommands: []*cli.Command{
				{
					Name:    "rules",
					Aliases: []string{"r"},
					Usage:   "Access Rules",
					Subcommands: []*cli.Command{
						{
							Name:    "list",
							Aliases: []string{"l"},
							Action:  firewallAccessRules,
							Usage:   "List firewall access rules",
							Flags: []cli.Flag{
								&cli.StringFlag{
									Name:  "zone",
									Usage: "zone name",
								},
								&cli.StringFlag{
									Name:  "account",
									Usage: "account name",
								},
								&cli.StringFlag{
									Name:  "value",
									Usage: "rule value",
								},
								&cli.StringFlag{
									Name:  "scope-type",
									Usage: "rule scope",
								},

								&cli.StringFlag{
									Name:  "mode",
									Usage: "rule mode",
								},
								&cli.StringFlag{
									Name:  "notes",
									Usage: "rule notes",
								},
							},
						},
						{
							Name:    "create",
							Aliases: []string{"c"},
							Action:  firewallAccessRuleCreate,
							Usage:   "Create a firewall access rule",
							Flags: []cli.Flag{
								&cli.StringFlag{
									Name:  "zone",
									Usage: "zone name",
								},
								&cli.StringFlag{
									Name:  "account",
									Usage: "account name",
								},
								&cli.StringFlag{
									Name:  "value",
									Usage: "rule value",
								},
								&cli.StringFlag{
									Name:  "mode",
									Usage: "rule mode",
								},
								&cli.StringFlag{
									Name:  "notes",
									Usage: "rule notes",
								},
							},
						},
						{
							Name:    "update",
							Aliases: []string{"u"},
							Action:  firewallAccessRuleUpdate,
							Usage:   "Update a firewall access rule",
							Flags: []cli.Flag{
								&cli.StringFlag{
									Name:  "id",
									Usage: "rule id",
								},
								&cli.StringFlag{
									Name:  "zone",
									Usage: "zone name",
								},
								&cli.StringFlag{
									Name:  "account",
									Usage: "account name",
								},
								&cli.StringFlag{
									Name:  "mode",
									Usage: "rule mode",
								},
								&cli.StringFlag{
									Name:  "notes",
									Usage: "rule notes",
								},
							},
						},
						{
							Name:    "create-or-update",
							Aliases: []string{"o"},
							Action:  firewallAccessRuleCreateOrUpdate,
							Usage:   "Create a firewall access rule, or update it if it exists",
							Flags: []cli.Flag{
								&cli.StringFlag{
									Name:  "zone",
									Usage: "zone name",
								},
								&cli.StringFlag{
									Name:  "account",
									Usage: "account name",
								},
								&cli.StringFlag{
									Name:  "value",
									Usage: "rule value",
								},
								&cli.StringFlag{
									Name:  "mode",
									Usage: "rule mode",
								},
								&cli.StringFlag{
									Name:  "notes",
									Usage: "rule notes",
								},
							},
						},
						{
							Name:    "delete",
							Aliases: []string{"d"},
							Action:  firewallAccessRuleDelete,
							Usage:   "Delete a firewall access rule",
							Flags: []cli.Flag{
								&cli.StringFlag{
									Name:  "id",
									Usage: "rule id",
								},
								&cli.StringFlag{
									Name:  "zone",
									Usage: "zone name",
								},
								&cli.StringFlag{
									Name:  "account",
									Usage: "account name",
								},
							},
						},
					},
				},
			},
		},
		{
			Name:    "origin-ca-root-cert",
			Aliases: []string{"ocrc"},
			Action:  originCARootCertificate,
			Usage:   "Print Origin CA Root Certificate (in PEM format)",
			Flags: []cli.Flag{
				&cli.StringFlag{
					Name:     "algorithm",
					Usage:    "certificate algorithm ( ecc | rsa )",
					Required: true,
				},
			},
		},
	}
	err := app.Run(os.Args)
	if err != nil {
		os.Exit(1)
	}
	os.Exit(0)
}