haproxy-manager-base/__pycache__/haproxy_manager.cpython-310.pyc

o
+<2B><>h<08><00>
@sJdd
lZdd
l
Z
ddlmZmZmZmZmZ
ddlm	Z	
dd
l
Z
dd
lZdd
lZdd
l
Z
dd
lZdd
lZddlmZ
dd
lZdd
lZdd
lZee<14>
ZdZe	d<06>
ZdZdZd	Zd
ZdZdZe
j<1E>d
<0A>
Z ej!ej"de<0F>#d<0F>
e<0F>$<24>gd<10>
e<0F>%e<14>
Z&dd<12>Z'dxdd<15>
Z(dd<17>Z)dd<19>Z*dd<1B>Z+dd<1D>Z,e<0B>-e<17>
Z.ej/e.d<1E>
Z0ej1dd g
d!<21>e'd"d#<23><00>
<01>
Z2ej1d$d g
d!<21>d%d&<26><00>
Z3ej1d'd g
d!<21>e'd(d)<29><00>
<01>
Z4ej1d*d g
d!<21>e'd+d,<2C><00>
<01>
Z5ej1d-d.g
d!<21>e'd/d0<64><00>
<01>
Z6e<15>1d1<64>
d2d3<64><00>
Z7e<15>1d4<64>
d5d6<64><00>
Z8ej1d7d.g
d!<21>e'd8d9<64><00>
<01>
Z9ej1d:d.g
d!<21>e'd;d<<3C><00>
<01>
Z:ej1d=d g
d!<21>e'd>d?<3F><00>
<01>
Z;ej1d@d g
d!<21>e'dAdB<64><00>
<01>
Z<ej1dCd g
d!<21>e'dDdE<64><00>
<01>
Z=ej1dFd g
d!<21>e'dGdH<64><00>
<01>
Z>ej1dId.g
d!<21>e'dJdK<64><00>
<01>
Z?ej1d-dLg
d!<21>e'dMdN<64><00>
<01>
Z@ej1dOd g
d!<21>e'dPdQ<64><00>
<01>
ZAej1dOd.g
d!<21>e'dRdS<64><00>
<01>
ZBej1dOdLg
d!<21>e'dTdU<64><00>
<01>
ZCej1dVd.g
d!<21>e'dWdX<64><00>
<01>
ZDej1dYd.g
d!<21>e'dZd[<5B><00>
<01>
ZEd\d]<5D>ZFd^d_<64>ZGd`da<64>ZHdbdc<64>ZIddde<64>ZJdfdg<64>ZKdhdi<64>ZLdjdk<64>ZMdldm<64>ZNednk<02>r#e)<29>
e*<2A>
e+e<1D>

z
eF<EFBFBD>
e&<26>Odo<64>

WneP<65>
y<>
ZQ
ze&<26>RdpeQ<65><00><02>

WYd
ZQ[Qnd
ZQ[Qw
weN<65>
e*<2A>
ddqlSmTZT
drds<64>ZUeTeUddt<64>ZVeV<65>W<EFBFBD>
ejXdudvdw<64>
d
Sd
S)y<>N)<05>Flask<73>request<73>jsonify<66>render_template<74>	send_file)
<01>Path<74>
<01>datetimez/etc/haproxy/haproxy_config.db<64>	templates<65>/etc/haproxy/haproxy.cfgz/etc/haproxy/haproxy.cfg.backupz/etc/haproxy/blocked_ips.mapz#/etc/haproxy/blocked_ips.map.backupz/var/run/haproxy.sockz/etc/haproxy/certs<74>HAPROXY_API_KEYz4%(asctime)s - %(name)s - %(levelname)s - %(message)sz/var/log/haproxy-manager.log)<03>level<65>format<61>handlersc
st<00>
<01><00>
<01>f
d
d<02><08>
}
|
S)z=Decorator to require API key authentication if API_KEY is setcs@trt
j<02>d
<01>
}|r|dt<00><00>krtddi
<01>
dfS<00>|i|
<01>
<01>
S)N<>
AuthorizationzBearer <20>errorz)Unauthorized - Invalid or missing API keyi<79>
)<05>API_KEYr<00>headers<72>getr)<03>args<67>kwargs<67>auth_header<65>
<01>
f<><00>haproxy_manager.py<70>decorated_function*s




z+require_api_key.<locals>.decorated_function)<02>	functools<6C>wraps)rrrrr<00>require_api_key(s
rTcCs<>t<00>
<01><00><02>||
|d
<01>}|
rt<03>d|<00>d<03><03>

|St<03>d|<00>d|<02><00><04>

tdd<06><02>}|<04>t<08>	|<03>
d<00>

Wd<00>
|S1s>w



Y
|S)	z*Log operations for monitoring and alerting)<04>	timestamp<6D>	operation<6F>successrz
Operation z completed successfullyz	 failed: z#/var/log/haproxy-manager-errors.log<6F>
a<>

N)
r	<00>now<6F>	isoformat<61>logger<65>infor<00>open<65>write<74>json<6F>dumps)r!r"<00>
error_message<67>	log_entryrrrr<00>
log_operation3s



<06>
<16>

<EFBFBD><10>r/cCsht<00>
t<02>
<01>%}|<00><03>}
|
<01>d
<01>

|
<01>d<02>

|
<01>d<03>

|
<01>d<04>

|<00><05>
Wd<00>
dS1s-w



Y
dS)Na

            CREATE TABLE IF NOT EXISTS domains (
                id INTEGER PRIMARY KEY,
                domain TEXT UNIQUE NOT NULL,
                ssl_enabled BOOLEAN DEFAULT 0,
                ssl_cert_path TEXT,
                template_override TEXT
            )
        a

            CREATE TABLE IF NOT EXISTS backends (
                id INTEGER PRIMARY KEY,
                name TEXT UNIQUE NOT NULL,
                domain_id INTEGER,
                settings TEXT,
                FOREIGN KEY (domain_id) REFERENCES domains (id)
            )
        a<>

            CREATE TABLE IF NOT EXISTS backend_servers (
                id INTEGER PRIMARY KEY,
                backend_id INTEGER,
                server_name TEXT NOT NULL,
                server_address TEXT NOT NULL,
                server_port INTEGER NOT NULL,
                server_options TEXT,
                FOREIGN KEY (backend_id) REFERENCES backends (id)
            )
        a"

            CREATE TABLE IF NOT EXISTS blocked_ips (
                id INTEGER PRIMARY KEY,
                ip_address TEXT UNIQUE NOT NULL,
                reason TEXT,
                blocked_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
                blocked_by TEXT
            )
        )<06>sqlite3<65>connect<63>DB_FILE<4C>cursor<6F>execute<74>commit)<02>connr3rrr<00>init_dbGs






	"<22>r7c
Cs2tj
d
dgdd<04>}|jdkrt<00>
gd<06>
<01>

dSdS)zVRegister with Let's Encrypt using the certbot client and agree to the terms of service<63>certbot<6F>show_accountT)
<01>capture_outputr
)r8<00>registerz--agree-tosz!--register-unsafely-without-emailz--no-eff-emailN)<03>
subprocess<EFBFBD>run<75>
returncode)
<01>resultrrr<00>certbot_registerzs


<04>r@c
Cs
tj
<01>|d
<01>}
t|
<01>

tj
<01>|
<01>
rtd<02>

dSzt<00>|<00>

Wn	ty'


Yn
wt<07><08>}t	j
dddddd	d
ddd
dddd|<02><00>gdd<12>
t|
d<13><02>.}dD]#}t|d<15><02>}|<03>|<05>
<0A><00>

Wd<00>
n1sew



Y
t<00>|<04>

qLWd<00>
n1szw



Y
t<0F>
dS)z0Generate a self-signed certificate for a domain.zdefault_self_signed_cert.pemzSelf Signed Cert FoundT<64>openssl<73>reqz-x509z-newkeyzrsa:4096z-keyout<75>/tmp/key.pemz-out<75>
/tmp/cert.pemz-days<79>3650z-nodesz-subjz/CN=)
<01>check<63>wb)rDrC<00>rbN)<10>os<6F>path<74>join<69>print<6E>exists<74>mkdir<69>FileExistsError<6F>socket<65>gethostnamer<r=r)r*<00>read<61>remove<76>generate_config)<06>
ssl_certs_dir<69>self_sign_cert<72>DOMAIN<49>combined<65>filerrrr<00>generate_self_signed_cert<72>s>







<02>







<02><06>



<1C><02><1C>
rZc
Cs*t<00>
d
g
<01>
D]}
|
jd
|kr
dSqdS)N<>nameTF)<03>psutil<69>process_iterr()<02>process_name<6D>processrrr<00>is_process_running<6E>s



<02>r`)
<01>loaderz/api/domains<6E>GET)
<01>methodsc
Cs<>z5t<00>
t<02>
<01>}tj|_|<00><05>}
|
<01>d
<01>

Wd<00>
n1sw



Y
dd<03>|
<01><07>D<00>
}tdd<05>
t	|<02>
WSt
yZ
}
ztddt|<03>
<01>
t	dt|<03>
d<08><02>
d	fWYd}~Sd}~w
w)
Nz<EFBFBD>
            SELECT d.*, b.name as backend_name
            FROM domains d
            LEFT JOIN backends b ON d.id = b.domain_id
        c
S<00>g|]}
t|
<01>
<01>qSr<00>
<01>dict<63><02>.0<EFBFBD>rowrrr<00>
<listcomp><3E><00>zget_domains.<locals>.<listcomp><3E>get_domainsTFr<00><02>status<75>message<67><65>
<00>r0r1r2<00>Row<6F>row_factoryr3r4<00>fetchallr/r<00>	Exception<6F>str)r6r3<00>domains<6E>
errrrl<00>s



<1C>





"
<08><02>rlz/healthc
Cs<>z5td
<01>
}t
<01>t<03>
<01>}
|
<01><04>}|<02>d<02>

|<02><06>
Wd<00>
n1s"w



Y
td|r-dn
ddd<07><03>
dfWStyR
}
ztd	t	|<03>
d
<EFBFBD><02>
dfWYd}~Sd}~w
w)N<>haproxyzSELECT 1<>healthy<68>running<6E>stopped<65>	connected)rn<00>haproxy_status<75>database<73><65><00>	unhealthy<68>rnrrp)
r`r0r1r2r3r4<00>fetchonerrurv)<04>haproxy_runningr6r3rxrrr<00>health_check<63>s.




<1C>



<06><06>


<06><10><08><02>r<EFBFBD>z/api/regeneratec

Csnzt<00>
t
d
d<02>
tddi
<01>
dfWSty6
}
zt
d
dt|<00>
<01>
tdt|<00>
d<08><02>
d	fWYd}~Sd}~w
w)
N<EFBFBD>regenerate_configTrnr"r<>F<>failedr<64>rp<00>rTr/rrurv<00>
rxrrr<00>regenerate_conf<6E>s








<06><10><08><02>r<EFBFBD>z/api/reloadc
CsB
zptd
<01>
r-t
jdddddd<04>}td|j<04>d|j<05>d|j<06><00><06>

tdd<03>
tdd	i
<01>
d
fWSt
jd
ddd
dt	gdddd<0F>}|jdkrStd<11>

tdd<03>
tdd	i
<01>
d
fWSd|j<04>d|j<05><00>}
t|
<01>

tdd|
<01>
td|
d<17><02>
dfWSt
j
y<EFBFBD>
}
z#d|j<04>d|j<05><00>}
t|
<01>

tdd|
<01>
td|
d<17><02>
dfWYd}~Sd}~w
w)Nry<00>,echo "reload" | socat stdio /tmp/haproxy-cliT)rFr:<00>text<78>shellzReload result: z, <20>reload_haproxyrnr"r<><00>-W<>-S<>/tmp/haproxy-cli,level,admin<69>-f<>rFr:r<>r
<00>HAProxy started successfully<6C>
start_haproxy<78> HAProxy start command returned: <20>
Error output: Fr<46>r<>rp<00>Failed to start HAProxy: r$)r`r<r=rL<00>stdout<75>stderrr>r/r<00>HAPROXY_CONFIG_PATH<54>CalledProcessError<6F>r?<00>	error_msgrxrrrr<><00>s:

<06> 






<06>












<08><02>r<EFBFBD>z/api/domain<69>POSTcCsn
t<00>
<01>}|<00>d
<01>
}
|<00>d<02>
}|<00>d<03>
}|<00>dg<00>}|
r|s,tddd<07>
tddd	<09><02>
d
fSzet<05>t<07>
<01>;}|<05><08>}|<06>	d|
|f<02>
|j
}|<06>	d||f<02>
|j
}|D]}	|<06>	d
||	d|	d|	d|	<09>d<11>
f<05>
qOWd<00>
n1spw



Y
|<06><0B>
|<05><0B>
t<0C>
tddd|
<01>d<14><03>
td|d<16><02>
WSt
y<>
}

ztddt|
<EFBFBD>
<01>
tdt|
<EFBFBD>
d	<09><02>
dfWYd}
~
Sd}
~
w
w)N<>domain<69>template_override<64>backend_name<6D>servers<72>
add_domainFz$Domain and backend_name are requiredrrm<00><>
z=INSERT INTO domains (domain, template_override) VALUES (?, ?)z4INSERT INTO backends (name, domain_id) VALUES (?, ?)z<>
                    INSERT INTO backend_servers
                    (backend_id, server_name, server_address, server_port, server_options)
                    VALUES (?, ?, ?, ?, ?)
                r[<00>address<73>port<72>optionsT<73>Domain z added successfullyr")rn<00>	domain_idrp)r<00>get_jsonrr/rr0r1r2r3r4<00>	lastrowid<69>closerTrurv)<0B>datar<61>r<>r<>r<>r6r3r<><00>
backend_id<EFBFBD>serverrxrrrr<>
sF












<04>

<02><06><02><1C>





"
<08><02>r<EFBFBD><00>
/cCstd
<01>
S)Nz
index.html<6D>
rrrrr<00>index.
sr<>z
/default-pagec
Cs<tj
<01>d
d<02>}tdtj
<01>dd<05>tj
<01>dd<07>tj
<01>dd	<09>d
<EFBFBD>S<00>z,Serve the default page for unmatched domains<6E>HAPROXY_ADMIN_EMAILzadmin@example.comzdefault_page.html<6D>HAPROXY_DEFAULT_PAGE_TITLEzSite Not Configured<65>HAPROXY_DEFAULT_MAIN_MESSAGEziThis domain has not been configured yet. Please contact your system administrator to set up this website.<2E>!HAPROXY_DEFAULT_SECONDARY_MESSAGEzLIf you believe this is an error, please check the domain name and try again.)<03>
page_title<EFBFBD>main_message<67>secondary_message)rI<00>environrr<00>
<01>admin_emailrrr<00>default_page2
<00>


<06>r<EFBFBD>z/api/sslc
Cs<>
t<00>
<01>}|<00>d
<01>
}
|
stddd<04>
tddd<07><02>
dfSz<>tjd	d
ddd
ddd|
g	ddd<12>}|jdkr<>d|
<01>d<15>}d|
<01>d<16>}t<08>d|
<01>d<18>}t	j
tdd<19>
t|d<1A><02>}tjd||g|d<1C>
Wd<00>
n1sfw



Y
t<0C>
t<0E>
<01>}|<07><0F>}|<08>d||
f<02>
Wd<00>
n1s<>w



Y
|<08><11>
|<07><11>
t<12>
tddd|
<01><00><02>
td |
|d!d"<22><04>
WSd#|j<13><00>}	tdd|	<09>
td|	d<07><02>
d$fWSty<>
}

ztddt|
<EFBFBD>
<01>
tdt|
<EFBFBD>
d<07><02>
d$fWYd}
~
Sd}
~
w
w)%zBLegacy endpoint for requesting SSL certificate for a single domainr<6E><00>request_sslFzDomain not providedr<00>Domain is requiredrmr<>r8<00>certonly<6C>-n<>--standalone<6E>--preferred-challenges<65>http<74>--http-01-port=8688<38>-dT<64>r:r<>r
<00>/etc/letsencrypt/live/<2F>/fullchain.pem<65>/privkey.pemr<6D><00>.pem<65>
<01>exist_ok<6F>
w<>cat<61>
r<>Nz<4E>
                    UPDATE domains
                    SET ssl_enabled = 1, ssl_cert_path = ?
                    WHERE domain = ?
                zSSL certificate obtained for r"<00>!Certificate obtained successfully)rnr<><00>	cert_pathroz"Failed to obtain SSL certificate: rp)rr<>rr/rr<r=r><00>
SSL_CERTS_DIRrI<00>makedirsr)r0r1r2r3r4r<>rTr<>rurv)r<>r<>r?r<><00>key_path<74>
combined_pathrXr6r3r<>rxrrrr<>=
sZ






<02><06>



<1C>

<06><1C>








<EFBFBD>



"
<08><02>r<EFBFBD>z/api/certificates/renewc
Csz<>tj
gd
<01>
ddd<03>}|jdkr<>d|jvsd|jvr<>t<04>t<06>
<01>[}
|
<01><07>}|<02>d<07>

|<02>	<09>}|D]C\}}|rrt
j<0B>|<05>
rrd|<04>d	<09>}d|<04>d
<EFBFBD>}t
j<0B>|<06>
rrt
j<0B>|<07>
rrt
|d<0B><02>}tj
d||g|d
<0A>
Wd<00>
n1smw



Y
q/Wd<00>
n1s}w



Y
t<0E>
tj
ddddd<10>}	|	jdkr<>tddd<12>
tddd<14><02>
WSd|	j<11><00>}
tdd|
<EFBFBD>
td|
d<14><02>
dfWStddd<19>
tddd<14><02>
WSd|j<11><00>}
tdd|
<EFBFBD>
td|
d<14><02>
dfWSty<>
}
ztddt|<0B>
<01>
tdt|<0B>
d<14><02>
dfWYd}~Sd}~w
w)z)Renew all certificates and reload HAProxy)r8<00>renewz--quietTr<54>r
<00>Congratulations<6E>renewedz?SELECT domain, ssl_cert_path FROM domains WHERE ssl_enabled = 1r<31>r<>r<>r<>r<>r<>Nr<4E><00>r:r<>r<><00>renew_certificatesz)Certificates renewed and HAProxy reloadedr"rmz0Certificates renewed but HAProxy reload failed: F<>partial_successrpzNo certificates needed renewalzCertificate renewal failed: r)r<r=r>r<>r0r1r2r3r4rtrIrJrMr)rTr/rr<>rurv)r?r6r3rwr<>r<><00>letsencrypt_cert<72>letsencrypt_keyrX<00>
reload_resultr<74>rxrrrr<>w
sR
<06>








<1C><02><02><1C>

<06>









"
<08><02>r<EFBFBD>z#/api/certificates/<domain>/downloadc

Cs&
zmt<00>
t<02>
<01>]}
|
<01><03>}|<02>d
|f
<01>
|<02><05>}|r|ds-tddd<05><02>
dfWd<00>
WS|d}tj<08>	|<04>
sHtddd<05><02>
dfWd<00>
WSt
d	d
d|<00><00><02>
t|d
|<00>d<0C>d
<0A>Wd<00>
WS1sfw



Y
WdSty<>
}
zt
d	dt
|<05>
<01>
tdt
|<05>
d<05><02>
dfWYd}~Sd}~w
w)z3Download the combined certificate file for a domainzFSELECT ssl_cert_path FROM domains WHERE domain = ? AND ssl_enabled = 1r
r<00> Certificate not found for domainrm<00><>
NzCertificate file not found<6E>download_certificateTzCertificate downloaded for r<><00><02>
as_attachment<6E>
download_nameFrp)r0r1r2r3r4r<>rrIrJrMr/rrurv)r<>r6r3r?r<>rxrrrr<><00>
s(




<12>

<12>
(<28>
"
<08><02>r<EFBFBD>z/api/certificates/<domain>/keyc

C<00><>z*d
|<00>d<02>}
tj
<01>|
<01>
stddd<05><02>
dfWStddd	|<00><00><02>
t|
d|<00>d
<EFBFBD>d<0B>WStyO
}
ztddt|<02>
<01>
tdt|<02>
d<05><02>
d
fWYd}~Sd}~w
w)z%Download the private key for a domainr<6E>r<>rz Private key not found for domainrmr<><00>download_private_keyTzPrivate key downloaded for z_key.pemr<6D>FrpN<>rIrJrMrr/rrurv)r<>r<>rxrrrr<><00>
<00>





"
<08><02>r<EFBFBD>z/api/certificates/<domain>/certc

Cr<>)z@Download only the certificate (without private key) for a domainr<6E>r<>rr<>rmr<><00>download_cert_onlyTz"Certificate (only) downloaded for z	_cert.pemr<6D>FrpNr<4E>)r<>r<>rxrrrr<><00>
r<>r<>z/api/certificates/statuscCs<>
z<>t<00>
t<02>
<01><>}|<00><03>}
|
<01>d
<01>

|
<01><05>}g}|D]\}}}|t|<05>
|ddd<03>}|r<>tj<08>	|<06>
r<>zJt
jddd|ddgd	d	d
<EFBFBD>}|jdkrx|j
<0A>d<0C>
D].}	d
|	vrw|	<09>d<0E>
d<00><0F>}
ddlm}
|<0B>|
d<11>}|<0C><12>|d<||<0B><13>j}
|
|d<
n
qIWnty<>
}
zt|<0E>
|d<WYd}~nd}~w
w|<03>|<07>

qtdd	<09>
td|i
<01>
Wd<00>
WS1s<>w



Y
WdSty<>
}
ztddt|<0E>
<01>
tdt|<0E>
d<18><02>
dfWYd}~Sd}~w
w)z9Get status of all certificates including expiration dateszLSELECT domain, ssl_enabled, ssl_cert_path FROM domains WHERE ssl_enabled = 1N)r<><00>ssl_enabledr<64><00>expires<65>days_until_expiryrA<00>x509z-inz-nooutz-datesTr<54>r
r$z	notAfter=<3D>
=<3D>
rz%b %d %H:%M:%S %Y %Zr<5A>r<>r<00>get_certificate_status<75>certificatesFrmrp)r0r1r2r3r4rt<00>boolrIrJrMr<r=r>r<><00>split<69>stripr	<00>strptimer&r%<00>daysrurv<00>appendr/r)r6r3rw<00>cert_statusr<73>r<>r<>rnr?<00>line<6E>expiry_date_strr	<00>expiry_date<74>
days_untilrxrrrr<><00>
sZ









<06>

<02><06>







<02><04>

<08><02>


(<28>*
"
<08><02>r<EFBFBD>z/api/certificates/requestcCs&t<00>
<01>}|<00>d
g<00>}
|<00>dd<03>}|<00>dd<05>}|
s'tddd<07>
tdd	d
<EFBFBD><02>
dfSt|
t<06>s/|
g
}
g}d}d}|
D]<5D>}z<>|g
}|rL|<07>d
<0A>
sL|<08>d
|<07><00><02>

gd<0E>
}	|rW|	<09>d<0F>

|D]	}
|	<09>	d|
g<02>

qYt
j|	ddd<11>}|jdkr<>d|<07>d<13>}d|<07>d<14>}
t
<0A>d|<07>d<16>}tjt
dd<17>
t|d<18><02>}t
jd||
g|d<1A>
Wd<00>
n1s<>w



Y
t<11>t<13>
<01>*}|<10><14>}|<11>d|f
<01>
|<11><16>}|r<>|<11>d||f<02>
n|<11>d||f<02>
Wd<00>
n1s<>w



Y
|<04>|dd ||d!<21><05>

|d"7}nd#|<07>d$|j<17><00>}|<04>|d||jd%<25><04>

|d"7}Wq7t<18>
y4
}
zd&|<07>d$t|<14>
<01><00>}|<04>|d|d'<27><03>

|d"7}WYd}~q7d}~w
w|dk<04>
rkzt<1A>
tddd(|<05>d)|<06>d*<2A><05>
Wnt<18>
yj
}
ztddd+t|<14>
<01><00><02>
WYd}~nd}~w
wd,t|
<01>
||d-<2D>|d.<2E>}|dk<02>
r<>t|<15>
d/fS|dk<04>
r<>t|<15>
d0fSt|<15>
d1fS)2z6Request certificate generation for one or more domainsrw<00>
force_renewalF<6C>include_wwwT<77>request_certificateszNo domains providedrzAt least one domain is requiredrmr<>r
zwww.)r8r<>r<>r<>r<>r<>r<>z--force-renewalr<6C>r<>r<>r<>r<>r<>r<>r<>r<>r<>r<>N<>'SELECT id FROM domains WHERE domain = ?z<>
                            UPDATE domains
                            SET ssl_enabled = 1, ssl_cert_path = ?
                            WHERE domain = ?
                        z<>
                            INSERT INTO domains (domain, ssl_enabled, ssl_cert_path)
                            VALUES (?, 1, ?)
                        r"r<>)r<>rnror<><00>domains_coveredr<64>z!Failed to obtain certificate for <20>: )r<>rnror<>zException while processing )r<>rnrozSuccessfully obtained z certificates, z failedz4Certificates obtained but config generation failed: <20>	completed)<03>total<61>
successfulr<EFBFBD>)rn<00>summary<72>resultsr<73><00><>rp)rr<>rr/r<00>
isinstance<EFBFBD>list<73>
startswithr<EFBFBD><00>extendr<r=r>r<>rIr<>r)r0r1r2r3r4r<>r<>rurvrT<00>len)r<>rwr

r
r
<00>
success_count<6E>error_countr<74><00>certbot_domains<6E>cmd<6D>
dr?r<>r<>r<>rXr6r3<00>
domain_existsr<73>rx<00>responserrrr
s<>


















<1C>

<06><04><02><1C>




<08>





<08><04>




<08><08><02>





"
<08><02>

<04><06>





r
<00>DELETEc

Cs<>
t<00>
<01>}|<00>d
<01>
}
|
stddd<04>
tddd<06><02>
dfSz<>t<05>t<07>
<01><>}|<02><08>}|<03>	d|
f
<01>
|<03>
<EFBFBD>}|sMtddd	|
<01>d
<EFBFBD><03>
tddd<06><02>
dfWd<00>
WS|d
}|<03>	d|f
<01>
dd<10>|<03><0B>D<00>
}|D]	}|<03>	d|f
<01>
qc|<03>	d|f
<01>
|<03>	d|f
<01>
|<03>	d|f
<01>
|<03>
<EFBFBD>}|r<>|d
r<>z	t<0C>
|d
<00>

Wn	ty<>


Yn
wWd<00>
n1s<>w



Y
t<0F>
tddd	|
<01>d<16><03>
tddd<06><02>
WSty<>
}	
ztddt|	<09>
<01>
tdt|	<09>
d<06><02>
dfWYd}	~	Sd}	~	w
w)Nr<4E><00>
remove_domainFr<46>rrmr<>r
r<>z
 not foundzDomain not foundr<64>r
z+SELECT id FROM backends WHERE domain_id = ?c
S<00>g|]}
|
d<00>qS<00>
r
rrgrrrrj<00>rkz!remove_domain.<locals>.<listcomp>z0DELETE FROM backend_servers WHERE backend_id = ?z(DELETE FROM backends WHERE domain_id = ?z DELETE FROM domains WHERE id = ?zBSELECT ssl_cert_path FROM domains WHERE id = ? AND ssl_enabled = 1Tz removed successfullyr"zDomain configuration removedrp)rr<>rr/rr0r1r2r3r4r<>rtrIrS<00>OSErrorrTrurv)
r<EFBFBD>r<>r6r3<00>
domain_resultr<74><00>backend_idsr<73><00>cert_resultrxrrrr
<00>sN








<12>







<02><02><1C>%

"
<08><02>r
z/api/blocked-ipsc
Cs<>z8t<00>
t<02>
<01>(}tj|_|<00><05>}
|
<01>d
<01>

dd<03>|
<01><07>D<00>
}tdd<05>
t	|<02>
Wd<00>
WS1s1w



Y
WdSt
y]
}
ztddt|<03>
<01>
t	dt|<03>
d	<09><02>
d
fWYd}~Sd}~w
w)zGet all blocked IP addressesz2SELECT * FROM blocked_ips ORDER BY blocked_at DESCc
Srdrrergrrrrj<00>rkz#get_blocked_ips.<locals>.<listcomp><3E>get_blocked_ipsTNFrrmrprq)r6r3<00>blocked_ipsrxrrrr!
<00>s








(<28>
"
<08><02>r!
c

Cst<00>
<01>}|<00>d
<01>
}
|<00>dd<03>}|<00>dd<05>}|
s&tddd<08>
td	dd
<EFBFBD><02>
dfSz<>t<05>t<07>
<01>}|<04><08>}|<05>	d|
||f<03>
|j
}Wd
<00>
n1sGw



Y
t<0B>sbtddd|
<01><00><02>
td	dd
<EFBFBD><02>
dfWSt|
<01>

z.t
d<11>
r<>tj<0F>t<11>
rtt}nd}tjd|<07><00>dddd<15>}|jdkr<>t<15>d|
<01>d|j<17><00><04>

Wnty<>
}	
zt<15>d|
<01>d|	<09><00><04>

WYd
}	~	nd
}	~	w
wtddd|
<01>d<1B><03>
td|d|
<01>d<1D>d<1E><03>
WStjy<>


tddd|
<01>d<1F><03>
td	d d
<EFBFBD><02>
d!fYSt<18>
y

}	
ztddt|	<09>
<01>
td	t|	<09>
d
<EFBFBD><02>
dfWYd
}	~	Sd
}	~	w
w)"z%Add an IP address to the blocked list<73>
ip_address<EFBFBD>reasonzNo reason provided<65>
blocked_by<EFBFBD>API<50>add_blocked_ipF<70>IP address is requiredrrmr<>zIINSERT INTO blocked_ips (ip_address, reason, blocked_by) VALUES (?, ?, ?)N<>Failed to update map file for <20>%Failed to update blocked IPs map filerpry<00>/tmp/haproxy-cli<6C>echo "reload" | socat stdio Tr<54>r
z(HAProxy reload failed after blocking IP r
z*Error reloading HAProxy after blocking IP <20>IP z blocked successfullyr"z has been blocked)rn<00>
blocked_ip_idroz is already blockedzIP address is already blockedi<64>
)rr<>rr/rr0r1r2r3r4r<><00>update_blocked_ips_map<61>add_ip_to_runtime_mapr`rIrJrM<00>HAPROXY_SOCKET_PATHr<r=r>r'<00>warningr<67>ru<00>IntegrityErrorrv)
r<EFBFBD>r#
r$
r%
r6r3r.
<00>socket_pathr<68>rxrrrr'
<00>sX









<04><1C>





<06>

<04>
"
<08><02>





"
<08><02>r'
c
Cs
t<00>
<01>}|<00>d
<01>
}
|
stddd<04>
tddd<06><02>
dfSz<>t<05>t<07>
<01>;}|<02><08>}|<03>	d|
f
<01>
|<03>
<EFBFBD>}|sMtddd	|
<01>d
<EFBFBD><03>
tddd<06><02>
dfWd
<00>
WS|<03>	d|
f
<01>
Wd
<00>
n1s^w



Y
t<0B>sytddd|
<01><00><02>
tddd<06><02>
dfWSt|
<01>

z.t
d<12>
r<>tj<0F>t<11>
r<>t}nd}tjd|<05><00>dddd<16>}|jdkr<>t<15>d|
<01>d|j<17><00><04>

Wnty<>
}
zt<15>d|
<01>d|<07><00><04>

WYd
}~nd
}~w
wtddd	|
<01>d<1B><03>
tdd	|
<01>d<1D>d<06><02>
WSt<18>
y
}
ztddt|<07>
<01>
tdt|<07>
d<06><02>
dfWYd
}~Sd
}~w
w)z*Remove an IP address from the blocked listr#
<00>remove_blocked_ipFr(
rrmr<>z/SELECT id FROM blocked_ips WHERE ip_address = ?r-
z not found in blocked listz$IP address not found in blocked listr<74>Nz,DELETE FROM blocked_ips WHERE ip_address = ?r)
r*
rpryr+
r,
Tr<54>r
z*HAProxy reload failed after unblocking IP r
z,Error reloading HAProxy after unblocking IP z unblocked successfullyr"z has been unblocked)rr<>rr/rr0r1r2r3r4r<>r/
<00>remove_ip_from_runtime_mapr`rIrJrMr1
r<r=r>r'r2
r<>rurv)r<>r#
r6r3<00>	ip_resultr4
r<>rxrrrr5
sT









<12>	<1C>





<06>

<04>
"
<08><02>


"
<08><02>r5
z/api/config/reloadc

Csnzt<00>
t
d
dd<03>
tddd<06><02>
WSty6
}
zt
d
dt|<00>
<01>
tdt|<00>
d<06><02>
d	fWYd
}~Sd
}~w
w)z@Safely reload HAProxy configuration with validation and rollback<63>reload_config_safelyTzConfiguration reloaded safelyr"z%HAProxy configuration reloaded safelyrmFrrpNr<4E>r<>rrrr8
Gs


"
<08><02>r8
z/api/blocked-ips/syncc
CsT
z<>t<00>st
d
dd<03><02>
dfWSt<02>t<04>
<01>}|<00><05>}
|
<01>d<05>

dd<07>|
<01><07>D<00>
}Wd<00>
n1s0w



Y
ztj	<09>
t<0B>
r?t}nd	}tj
d
|<03><00>ddd<0C>
Wn


Yd
}|D]
}t|<05>
r`|d7}qVtddd|<04>dt|<02>
<01>d<12><05>
t
dd|<04>dt|<02>
<01>d<12>t|<02>
|d<14><04>
WSty<>
}
ztddt|<06>
<01>
t
d
t|<06>
d<03><02>
dfWYd}~Sd}~w
w)z-Sync blocked IPs from database to runtime maprzFailed to update map filermrp<00>6SELECT ip_address FROM blocked_ips ORDER BY ip_addressc
Sr
r
rrgrrrrjbrkz$sync_blocked_ips.<locals>.<listcomp>Nr+
z"echo "clear map #0" | socat stdio T<>r<>r:r
r<><00>sync_blocked_ipszSynced r<>z IPs to runtime mapr")rnro<00>	total_ips<70>
synced_ipsF)r/
rr0r1r2r3r4rtrIrJrMr1
r<r=r0
r/r
rurv)r6r3r"
r4
r
<00>iprxrrrr;
UsD




<1C>



<EFBFBD>



<02>





<EFBFBD>
"
<08><02>r;
cCs<00>
z<>t<00>
t<02>
}tj|_|<00><05>}
d
}|
<01>|<02>

dd<03>|
<01><07>D<00>
}|
<01>d<04>

dd<03>|
<01><07>D<00>
}g}t<08>	d<06>
<01>
<EFBFBD>}|<05>|<06>

t<0C>
t<08>	d<07>
j
t
d<08>
}|<05>|<07>

t<08>	d	<09>
<01>
<EFBFBD>}|<05>|<08>

g}	g}
d
}|<05>|<0B>

|D]<5D>}|dswt<0E>d|d
<00>d<0E><03>

qezt<08>	d<0F>
j
|d
|dd<10>}
|	<09>|
<0A>

t<0E>d|d
<00><00><02>

Wnty<>
}
zt<0E>d|d
<00>d|<0E><00><04>

WYd}~qed}~w
wzc|
<01>d|df
<01>
dd<03>|
<01><07>D<00>
}|s<>t<0E>d|d<00><00><02>

Wqe|ddu
r<>t<0E>d|d<00><00><02>

|dd}t<08>	|<10>
j
|d|d<1B>}nt<08>	d<1C>
j
|d|d|d<1E>}|
<EFBFBD>|<11>

t<0E>d|d<00><00><02>

Wqet<11>
y9
}
zt<0E>d |d<00>d|<0E><00><04>

WYd}~qed}~w
w|<05>d!<21>|	<09>
<01>

t<08>	d"<22>
<01>
<EFBFBD>}|<05>|<12>

zt<08>	d#<23>
<01>
<EFBFBD>}|<05>|<13>

Wn"t<11>
y~
}
zt<0E>d$|<0E><00><02>

d%}|<05>|<14>

WYd}~nd}~w
w|<05>d!<21>|
<EFBFBD>
d!<00>

d&}d!<21>|<05>
}t<0E>d'<27>

ttd(<28><02>
}|<17>|<16>

Wd<00>
n	1<00>
s<>w



Y
t<18>\}}|<18>
r<>t<0E>d)<29>

td*d+d)<29>
WdSd,|<19><00>}t<0E>|<1A>

td*d-|<1A>
t|<1A>
<01>
t<11>
y<>
}
zd.|<0E><00>}t<0E>|<1A>

td*d-|<1A>
d/dl}|<1B><1B>
<00>d}~w
w)0Na[

            SELECT
                d.id as domain_id,
                d.domain,
                d.ssl_enabled,
                d.ssl_cert_path,
                d.template_override,
                b.id as backend_id,
                b.name as backend_name
            FROM domains d
            LEFT JOIN backends b ON d.id = b.domain_id
        c
Srdrre)rhr<>rrrrj<00>rkz#generate_config.<locals>.<listcomp>z"SELECT ip_address FROM blocked_ipsc
Sr
r
rrgrrrrj<00>rkzhap_header.tplzhap_listener.tpl)
<01>crt_pathzhap_letsencrypt.tplzP    # Default backend for unmatched domains
    default_backend default-backend
r<EFBFBD>zSkipping domain r<>z - no backend namezhap_subdomain_acl.tpl)r<>r[zAdded ACL for domain: z Error generating domain ACL for r
zX
                    SELECT * FROM backend_servers WHERE backend_id = ?
                r<>c
Srdrre)rhr<>rrrrj<00>rkzNo servers found for backend r<>zTemplate Override is set to: z.tpl)r[r<>zhap_backend.tplr<6C>)r[r<>r<>zAdded backend block for: z#Error generating backend block for r$zhap_letsencrypt_backend.tplzhap_default_backend.tplz"Error generating default backend: z<># Default backend for unmatched domains
backend default-backend
    mode http
    option http-server-close
    server default-page 127.0.0.1:8080rzGenerated HAProxy configurationr<6E>z3Configuration generated and HAProxy reloaded safelyrTTzSafe reload failed: FzError generating config: r
)r0r1r2rrrsr3r4rt<00>template_env<6E>get_template<74>renderr<72>r/
r<>r'r2
r(rurrK<00>debugr)r<>r*<00>reload_haproxy_safelyr/<00>	traceback<63>	print_exc)r6r3<00>queryrwr"
<00>config_parts<74>default_headers<72>listener_block<63>letsencrypt_acl<63>config_acls<6C>config_backends<64>default_ruler<65><00>
domain_aclrxr<><00>
template_file<6C>
backend_block<63>letsencrypt_backend<6E>default_backend<6E>fallback_backend<6E>temp_config_path<74>config_contentrr"ror<>rE
rrrrT<00>s<>










<06>













<06>




<08><02>
<04>







<08>



<06>




<08><02>





<08><02>




<1E>


















<08><02>rTc

C<00>xz tj
<01>t<03>
r
t<04>tt<06>
tj
<01>t<07>
rt<04>tt<08>
t	<09>
d
<01>

WdSty;
}
zt	<09>d|<00><00><02>

WYd}~dSd}~w
w)z-Create backup of current config and map fileszBackups created successfullyTzFailed to create backup: NF)
rIrJrMr<><00>shutil<69>copy2<79>HAPROXY_BACKUP_PATH<54>BLOCKED_IPS_MAP_PATH<54>BLOCKED_IPS_MAP_BACKUP_PATHr'r(rurr<>rrr<00>
create_backup<00>









<08><02>r]
c

CrW
)zRestore from backup fileszBackups restored successfullyTzFailed to restore backup: NF)
rIrJrMrZ
rX
rY
r<>r\
r[
r'r(rurr<>rrr<00>restore_backup%r^
r_
c
Cs<>z)tj
d
ddtgddd<05>}|jdkrt<04>d<07>

WdSd	|j<06><00>}
t<04>|
<01>

d
|
fWStyI
}
zd|<02><00>}
t<04>|
<01>

d
|
fWYd}~Sd}~w
w)
z#Validate HAProxy configuration filery<00>-cr<63>Tr<54>r
z'HAProxy configuration validation passed<65>TNz)HAProxy configuration validation failed: Fz!Error validating HAProxy config: N)	r<r=r<>r>r'r(r<>rrur<>rrr<00>validate_haproxy_config2s 

<06>













<08><02>rb
c
Cs<>
z<>t<00>sWd
St
<01>\}}
|st<02>
dd|
<01><00>fWStd<04>
r<>zFtj<05>t<07>
r1tj	dt<07><00>dddd<07>}n	tj	ddddd<07>}|j
d	krHt<0B>d
<EFBFBD>

WWdSt<02>
tj	dddd<0C>
d
|j
<0A><00>}
t<0B>|
<01>

d|
fWWSty<>
}
zt<02>
d|<03><00>}
t<0B>|
<01>

d|
fWYd}~WSd}~w
wztj	dddddtgdddd<14>}t<0B>d<15>

WWdStjy<>
}
zt<02>
d|j
<0A><00>}
t<0B>|
<01>

d|
fWYd}~WSd}~w
wty<>
}
zd|<03><00>}
t<0B>|
<01>

d|
fWYd}~Sd}~w
w)z2Safely reload HAProxy with validation and rollback)FzFailed to create backupFzConfig validation failed: ryr,
Tr<54>r<>r
<00>HAProxy reloaded successfully)Trc
r:
zHAProxy reload failed: zCritical error during reload: Nr<4E>r<>r<>r<>r<>r<>)Tr<54>r<>z"Critical error in reload process: )r]
rb
r_
r`rIrJrMr1
r<r=r>r'r(r<>rrur<>r<>)<05>is_validr<64>r<>rxr?rrrrD
Csn







<08>

<06>




<06>








<08><02>


<06>






<08><02>




<08><02>rD
c
Cs<>zbt<00>
t<02>
<01>}|<00><03>}
|
<01>d
<01>

dd<03>|
<01><05>D<00>
}Wd<00>
n1s#w



Y
tjtj<08>	t
<EFBFBD>
dd<06>
tt
d<07><02>}|D]
}|<03>|<04>d<08><02>

q;Wd<00>
n1sPw



Y
t
<0A>d	t|<02>
<01>d
<EFBFBD><03>

WdSty}
}
zt
<0A>d|<05><00><02>

WYd}~dSd}~w
w)
z-Update the blocked IPs map file from databaser9
c
Sr
r
rrgrrrrj<00>rkz*update_blocked_ips_map.<locals>.<listcomp>NTr<54>r<>r$z"Updated blocked IPs map file with z IPsz"Failed to update blocked IPs map: F)r0r1r2r3r4rtrIr<>rJ<00>dirnamer[
r)r*r'r(r
rur)r6r3r"
rr>
rxrrrr/
<00>s&




<1C>


<02><1C>



<08><02>r/
c

C<00><>z9tj
<01>t<03>
r
t}
nd
}
d|<00>d|
<01><00>}tj|dddd<05>}|jdkr.t<07>d|<00>d<08><03>

WdSt<07>	d	|j
<EFBFBD><00><02>

Wd
StyT
}
zt<07>d|<04><00><02>

WYd}~d
Sd}~w
w)
z,Add IP to HAProxy runtime map without reloadr+
zecho "add map #0 <20>" | socat stdio T<>r<>r:r<>r
z	Added IP z to runtime mapz!Failed to add IP to runtime map: Fz Error adding IP to runtime map: N<>
rIrJrMr1
r<r=r>r'r(r2
r<>rur<00>r#
r4
r
r?rxrrrr0
<00><00> 









<08><02>r0
c

Crf
)
z1Remove IP from HAProxy runtime map without reloadr+
zecho "del map #0 rg
Trh
r
zRemoved IP z from runtime mapz&Failed to remove IP from runtime map: Fz$Error removing IP from runtime map: Nri
rj
rrrr6
<00>rk
r6
c
CsNtd
<01>
<01>
s%z<>t
j<02>t<04>
st<05>d<02>

WdStjd
ddtgddd<06>}|j	dkr<>t<05>
d|j<0B><00><02>

t<05>d	<09>

z
t<0C>
t<05>
d
<EFBFBD>

Wn+tyh
}

zt<05>
d|
<01><00><02>

t<05>d<0C>

td
dd|j<0B><00><02>
WYd}
~
WdSd}
~
w
wtjd
ddtgddd<06>}|j	dkr<>t<05>
d|j<0B><00><02>

t<05>d<0C>

td
dd|j<0B><00><02>
WdStjd
ddddtgdddd<14>}|j	dkr<>t<05>
d<15>

td
dd<15>
WdSd|j<10>d|j<0B><00>}t<05>
|<03>

td
d|<03>
WdStjy<>
}
z!d|j<10>d|j<0B><00>}t<05>
|<03>

td
d|<03>
t<05>d<1A>

WYd}~dSd}~w
t<0E>
y$
}
zd|<04><00>}t<05>
|<03>

td
d|<03>
t<05>d<1A>

WYd}~dSd}~w
wdS)Nryz5HAProxy config file not found, skipping HAProxy startr`
r<>Tr<54>r
z"HAProxy configuration is invalid: z)Attempting to regenerate configuration...z&Configuration regenerated successfullyz$Failed to regenerate configuration: z2HAProxy will not start due to configuration errorsr<73>FzInvalid config: z;HAProxy configuration is still invalid after regeneration: r<>r<>r<>r<>r<>r<>r<>r<>r$z/Container will continue without HAProxy runningz#Unexpected error starting HAProxy: )r`rIrJrMr<>r'r2
r<r=r>rr<>rTr(rur/r<>r<>)<05>test_result<6C>	gen_errorr?r<>rxrrrr<><00>sv









<06>











<08><02>



<06>









<06>











<08>






<08><02><04>r<EFBFBD><00>__main__z3Configuration generated successfully before startupz*Failed to generate initial configuration: )
<01>Threadcs\d
dlm
}m<02>
|t<03>
}
d|
_|
<01>d<04>
<01>f
dd<06><08>
}|
<01>d<07>
<01>f
dd	<09><08>
}|
jd
dd<0C>
d
S)z:Run a separate Flask app on port 8080 for the default pager
)rrr
r<>c
s<tj
<01>d
d<02>}<00>dtj
<01>dd<05>tj
<01>dd<07>tj
<01>dd	<09>d
<EFBFBD>Sr<>)rIr<>rr<>r<>rrr<>$r<>z-run_default_page_server.<locals>.default_pagez/blocked-ipcs<00>d
<01>
dfS)z-Serve the blocked IP page for blocked clientszblocked_ip_page.htmli<6C>
rrr<>rr<00>blocked_ip_page/sz0run_default_page_server.<locals>.blocked_ip_page<67>0.0.0.0i<EFBFBD><00><02>hostr<74>N)<07>flaskrr<00>__name__<5F>template_folder<65>router=)r<00>default_appr<70>rp
rr<>r<00>run_default_page_servers




ry
)<02>target<65>daemonrq
i@rr
ra
)Yr0rIrt
rrrrr<00>pathlibrr<<00>jinja2rPr\r<00>loggingr	r+rX
<00>tempfileru
<00>appr2<00>TEMPLATE_DIRr<52>rZ
r[
r\
r1
r<>r<>rr<00>basicConfig<69>INFO<46>FileHandler<65>
StreamHandler<65>	getLoggerr'rr/r7r@rZr`<00>FileSystemLoader<65>template_loader<65>Environmentr@
rw
rlr<>r<>r<>r<>r<>r<>r<>r<>r<>r<>r<>r<>r
r
r!
r'
r5
r8
r;
rTr]
r_
rb
rD
r/
r0
r6
r<>r(rurxr<00>	threadingro
ry
<00>default_server_thread<61>startr=rrrr<00><module>
s<>























<02><06>

3









 

)






8

2









1



7



2

2



*

D
D






<08><02>

<04>