48 lines
1.4 KiB
Bash
48 lines
1.4 KiB
Bash
#!/bin/bash
|
|
|
|
set -e
|
|
|
|
ADGUARD_YAML="/adguard/AdGuardHome.yaml"
|
|
TMP_YAML="/tmp/AdGuardHome.yaml"
|
|
MANUAL_IPS_FILE="/adguard/manually_blocked_ips.conf"
|
|
CIDR_BASE_URL="https://raw.githubusercontent.com/vulnebify/cidre/main/output/cidr/ipv4"
|
|
COUNTRIES=${BLOCK_COUNTRIES:-""}
|
|
DOCKER_API_URL=${DOCKER_API_URL:-"http://docker-socket-proxy:2375"}
|
|
|
|
if [ -z "$COUNTRIES" ]; then
|
|
echo "No countries specified in BLOCK_COUNTRIES."
|
|
exit 1
|
|
fi
|
|
|
|
mkdir -p /tmp/cidr
|
|
> /tmp/cidr/all.txt
|
|
|
|
IFS=',' read -ra CODES <<< "$COUNTRIES"
|
|
for CODE in "${CODES[@]}"; do
|
|
echo "Downloading CIDR list for $CODE..."
|
|
curl -sf "$CIDR_BASE_URL/${CODE^^}.txt" -o "/tmp/cidr/${CODE}.txt" || continue
|
|
cat "/tmp/cidr/${CODE}.txt" >> /tmp/cidr/all.txt
|
|
done
|
|
|
|
if [ -f "$MANUAL_IPS_FILE" ]; then
|
|
echo "Validating and adding manually blocked IPs from $MANUAL_IPS_FILE..."
|
|
grep -E '^([0-9]{1,3}\.){3}[0-9]{1,3}(/[0-9]{1,2})?$' "$MANUAL_IPS_FILE" >> /tmp/cidr/all.txt
|
|
fi
|
|
|
|
IPS_FORMATTED=$(sed 's/^/ - /' /tmp/cidr/all.txt)
|
|
|
|
awk -v ips="$IPS_FORMATTED" '
|
|
BEGIN { inside=0 }
|
|
/^ disallowed_clients:/ { print; inside=1; next }
|
|
/^ [^ ]/ && inside==1 { print ips; inside=0 }
|
|
{ if (!inside) print }
|
|
END { if (inside==1) print ips }
|
|
' "$ADGUARD_YAML" > "$TMP_YAML"
|
|
|
|
mv "$TMP_YAML" "$ADGUARD_YAML"
|
|
|
|
echo "Restarting adguard-home container..."
|
|
curl -s -X POST "$DOCKER_API_URL/containers/adguard-home/restart" -o /dev/null
|
|
|
|
echo "Done."
|