mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-10-02 23:06:36 +08:00
ryan
3342d3c39d
将 SSL 续期、可观测数据清理、WAF IP 组同步与 Uptime Kuma 同步 从 API 进程内 cron 迁移为 Asynq Handler，并通过 w_schedules 种子迁移 注册默认定时调度；移除 bootstrap 中的 in-process cron 启动逻辑。
44 lines
1.3 KiB
Go
44 lines
1.3 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package tasks
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"github.com/Rain-kl/Wavelet/internal/apps/openflare/tls"
|
|
"github.com/Rain-kl/Wavelet/internal/model"
|
|
"github.com/Rain-kl/Wavelet/pkg/logger"
|
|
)
|
|
|
|
// RunSSLRenewJob renews all TLS certificates that are due for renewal.
|
|
func RunSSLRenewJob(ctx context.Context) error {
|
|
logger.InfoF(ctx, "[OpenFlareTasks] SSL renew job started")
|
|
|
|
certificates, err := model.ListTLSCertificates(ctx)
|
|
if err != nil {
|
|
logger.ErrorF(ctx, "[OpenFlareTasks] list certificates failed: %v", err)
|
|
return err
|
|
}
|
|
|
|
now := time.Now()
|
|
due := tls.CertificatesDueForRenewal(certificates, now)
|
|
if len(due) == 0 {
|
|
logger.InfoF(ctx, "[OpenFlareTasks] SSL renew job completed: no certificates due")
|
|
return nil
|
|
}
|
|
|
|
var triggered int
|
|
for _, cert := range due {
|
|
logger.InfoF(ctx, "[OpenFlareTasks] renewing certificate id=%d domain=%s", cert.ID, cert.PrimaryDomain)
|
|
if _, err := tls.RenewCertificate(ctx, cert.ID); err != nil {
|
|
logger.ErrorF(ctx, "[OpenFlareTasks] renew certificate id=%d domain=%s failed: %v", cert.ID, cert.PrimaryDomain, err)
|
|
continue
|
|
}
|
|
triggered++
|
|
}
|
|
|
|
logger.InfoF(ctx, "[OpenFlareTasks] SSL renew job completed: triggered=%d eligible=%d", triggered, len(due))
|
|
return nil
|
|
} |