framework

.gitignore

@@ -1,2 +1,3 @@
 .idea/
 .venv/
+.secrets/

.secrets.example/certbot/cloudflare.ini

@@ -0,0 +1 @@
+dns_cloudflare_api_token = <API_TOKEN>

Dockerfile

@@ -0,0 +1,8 @@
+FROM python:latest
+
+WORKDIR /app
+COPY . /app
+RUN pip install --no-cache-dir -r requirements.txt
+
+ENTRYPOINT ["python", "certman.py"]
+CMD ["--help"]

certman.py

@@ -0,0 +1,20 @@
+from schemas import DomainRequest
+import subprocess
+
+def request_certificate(domain_request: DomainRequest):
+    domain = domain_request.domain
+    credentials_file = domain_request.credentials_file
+    email = domain_request.email
+    certbot_command = [
+        'certbot', 'certonly',
+        '--dns-cloudflare',
+        '--dns-cloudflare-credentials', credentials_file,
+        '--email', email,
+        '--agree-tos',
+        '--non-interactive',
+        '-d', domain,
+    ]
+    result = subprocess.run(certbot_command, capture_output=True, text=True)
+    if result.returncode != 0:
+        raise RuntimeError(f'Certbot returned non-zero exit code:\n{result.stderr}')
+    return result.stdout

requirements.txt

@@ -0,0 +1,3 @@
+certbot==5.4.0
+certbot-dns-cloudflare==5.4.0
+pydantic==2.12.5

schemas.py

@@ -0,0 +1,6 @@
+from pydantic import BaseModel, FilePath, EmailStr
+
+class DomainRequest(BaseModel):
+    domain: str
+    credentials_file: FilePath
+    email: EmailStr