Prepare KarlDNS production deployment

karldns/cli.py

@@ -0,0 +1,50 @@
+from __future__ import annotations
+
+import argparse
+
+from .app import make_app
+from .settings import DdnsSettings
+
+
+def main() -> None:
+    parser = argparse.ArgumentParser(prog="karldns")
+    subparsers = parser.add_subparsers(dest="command", required=True)
+
+    render_url = subparsers.add_parser("render-fritz-url", help="Print a FRITZ!Box DynDNS update URL.")
+    render_url.add_argument("--base-url", required=True, help="Public KarlDNS URL.")
+    render_url.add_argument("--update-secret", required=True, help="Private router update secret.")
+    render_url.add_argument("--include-ipv6", action="store_true")
+
+    serve = subparsers.add_parser("serve", help="Run the KarlDNS web service.")
+    serve.add_argument("--host", default="0.0.0.0")
+    serve.add_argument("--port", type=int, default=8080)
+    serve.add_argument(
+        "--access-log",
+        action="store_true",
+        help="Enable redacted request logs. Raw web-server access logs stay off because private URLs are secrets.",
+    )
+
+    args = parser.parse_args()
+    if args.command == "render-fritz-url":
+        print(_render_fritz_url(args.base_url, args.update_secret, args.include_ipv6))
+    elif args.command == "serve":
+        import uvicorn
+
+        settings = DdnsSettings.from_env()
+        if not settings.admin_password:
+            raise SystemExit("Set DDNS_ADMIN_PASSWORD before starting KarlDNS.")
+        if args.access_log:
+            settings = settings.model_copy(update={"redacted_access_log": True})
+        uvicorn.run(make_app(settings), host=args.host, port=args.port, access_log=False)
+
+
+def _render_fritz_url(base_url: str, update_secret: str, include_ipv6: bool) -> str:
+    base = base_url.rstrip("/")
+    url = f"{base}/api/v1/router/update/{update_secret}?myip=<ipaddr>"
+    if include_ipv6:
+        url += "&myipv6=<ip6addr>"
+    return url
+
+
+if __name__ == "__main__":
+    main()