From 5835cef7cacee4ae0044a27b9a45f87a62726dd1 Mon Sep 17 00:00:00 2001
From: Matthew Saunders Brown <matthewsaundersbrown@gmail.com>
Date: Wed, 5 Jul 2023 11:02:13 -0700
Subject: [PATCH] add dns checks for vhosts

---
 panel/classes/Panel/Vhost/Vhosts.php | 22 +++++++-
 panel/ui/vhost/vhosts-vhost.html     | 75 +++++++++++++++++++---------
 2 files changed, 72 insertions(+), 25 deletions(-)

diff --git a/panel/classes/Panel/Vhost/Vhosts.php b/panel/classes/Panel/Vhost/Vhosts.php
index 212e264..c7d3774 100644
--- a/panel/classes/Panel/Vhost/Vhosts.php
+++ b/panel/classes/Panel/Vhost/Vhosts.php
@@ -37,6 +37,24 @@ class Vhosts extends \Panel\Vhost {
             $cert_array['alternative'] = $alternative;
             $f3->set('cert_array', $cert_array);
           }
+        } else {
+          /* no cert, get dns info */
+          $dnsinfo = array();
+          $dnsinfo['server_addr'] = $_SERVER['SERVER_ADDR'];
+          # A record
+          $dnsinfo['a']['color'] = "red";
+          if ($certdomain_dns = dns_get_record("$vhost", DNS_A)) {
+            if ($certdomain_dns[0]['ip'] == $dnsinfo['server_addr']) {
+              $dnsinfo['a']['status'] = "Verified";
+              $dnsinfo['a']['color'] = "black";
+              $dnsinfo['verified_count']++;
+            } else {
+              $dnsinfo['a']['status'] = "Update";
+            }
+          } else {
+            $dnsinfo['a']['status'] = "Create";
+          }
+          $f3->set('dnsinfo', $dnsinfo);
         }
         /* get user info */
         $username = $vhost_array[0]['username'];
@@ -66,12 +84,12 @@ class Vhosts extends \Panel\Vhost {
 
     if ($f3->exists('PARAMS.vhost')) {
 
-      $vhost_array = $f3->get('vhost_array');
+      // $vhost_array = $f3->get('vhost_array');
 
       /* convert data for frontend display */
       // nothing to convert
 
-      $f3->set('vhost_array', $vhost_array);
+      // $f3->set('vhost_array', $vhost_array);
 
       $vhost = $f3->get('PARAMS.vhost');
       $f3->set('page_header', "Details for $vhost");
diff --git a/panel/ui/vhost/vhosts-vhost.html b/panel/ui/vhost/vhosts-vhost.html
index a62981e..e42b00c 100644
--- a/panel/ui/vhost/vhosts-vhost.html
+++ b/panel/ui/vhost/vhosts-vhost.html
@@ -34,32 +34,61 @@
   </tr>
 </table>
 
-<br><br>
-
 <check if="isset(@cert_array)">
-<true>
-<table>
-  <tr>
-    <th style="white-space: nowrap;">Certificate</th>
-    <th style="white-space: nowrap;">Expiration</th>
-    <th style="white-space: nowrap;">Secured Hostnames</th>
-    <th>Action</th>
-  </tr>
-  <tr>
-    <td style="white-space: nowrap;">{{ @cert_array.common }}</td>
-    <td style="white-space: nowrap;">{{ @cert_array.end }}</td>
-    <td style="white-space: nowrap; text-align: right;">{{ @cert_array.alternative | raw }}</td>
-    <td style="white-space: nowrap;"><a href="{{@BASE}}/Certs/{{@vhost_array.virtualhost}}/Delete?r={{@PATH}}">Delete</a></td>
-  </tr>
-</table>
-</true>
-<false>
-<a href="{{@BASE}}/Certs/{{@vhost_array.virtualhost}}/Add?r={{@PATH}}">Add Security Certificate</a>
-</false>
+  <true>
+    <br><br>
+    <table>
+      <tr>
+        <th style="white-space: nowrap;">Certificate</th>
+        <th style="white-space: nowrap;">Expiration</th>
+        <th style="white-space: nowrap;">Secured Hostnames</th>
+        <th>Action</th>
+      </tr>
+      <tr>
+        <td style="white-space: nowrap;">{{ @cert_array.common }}</td>
+        <td style="white-space: nowrap;">{{ @cert_array.end }}</td>
+        <td style="white-space: nowrap; text-align: right;">{{ @cert_array.alternative | raw }}</td>
+        <td style="white-space: nowrap;"><a href="{{@BASE}}/Certs/{{@vhost_array.virtualhost}}/Delete?r={{@PATH}}">Delete</a></td>
+      </tr>
+    </table>
+    <br><br>
+  </true>
+  <false>
+    <hr>
+    <check if="{{ @dnsinfo.a.status=='Verified' }}">
+      <true>
+        You need a Security Certificate. <a href="{{@BASE}}/Certs/{{@vhost_array.virtualhost}}/Add?r={{@PATH}}">Click Here</a> to add one now.
+      </true>
+      <false>
+        <span style="color:red">You need a Security Certificate for {{ @vhost_array.virtualhost }}.</span>
+        <br>
+        Before you can add one you must make the DNS change listed below. Once that's completed come back here and this message will change to an option to create a Security Certificate.
+        <br>
+        <small>Note that after you add DNS records it can take some time for the changes to propagate and show up here.</small>
+        <br><br>
+        <table>
+          <tr><th style="color:{{ @dnsinfo.a.color }}" colspan="2">{{ @dnsinfo.a.status }} A Record for {{ @vhost_array.virtualhost }}</th></tr>
+          <tr><td style="text-align: right;">Type:</td><td>A</td></tr>
+          <tr><td style="text-align: right;">Host:</td><td>{{ @vhost_array.virtualhost }}</td></tr>
+          <tr><td style="text-align: right;">Value:</td><td>{{ @dnsinfo.server_addr }}</td></tr>
+          <tr><td style="text-align: right;">TTL:</td><td>3600 (or default)</td></tr>
+          <tr><td></td><td><small>This should be the only A record for {{ @vhost_array.virtualhost }}.</small></td></tr>
+        </table>
+        <br><br>
+        <table>
+          <tr><th style="color:{{ @dnsinfo.a.color }}" colspan="2">Verify CNAME Record for www.{{ @vhost_array.virtualhost }}</th></tr>
+          <tr><td style="text-align: right;">Type:</td><td>CNAME</td></tr>
+          <tr><td style="text-align: right;">Host:</td><td>www.{{ @vhost_array.virtualhost }}</td></tr>
+          <tr><td style="text-align: right;">Value:</td><td>{{ @vhost_array.virtualhost }}</td></tr>
+          <tr><td style="text-align: right;">TTL:</td><td>3600 (or default)</td></tr>
+          <tr><td></td><td><small>This should be the only record for www.{{ @vhost_array.virtualhost }}.<br>Note this admin did not check for this record, it may already exist.</small></td></tr>
+        </table>
+      </false>
+    </check>
+    <hr>
+  </false>
 </check>
 
-<br><br>
-
 <table>
   <tr><th colspan="2">Remote Access</th></tr>
   <tr><td style="text-align: right;">Protocol:</td><td>SFTP (SSH File Transfer Protocol)</td></tr>