From de68238edb10a194a518b8b4848562f35c0849d8 Mon Sep 17 00:00:00 2001
From: Dirk Heilig <heilig@adesso-mobile.de>
Date: Tue, 12 Sep 2023 21:09:33 +0200
Subject: [PATCH] init

---
 Dockerfile | 16 ++++++++++++++++
 index.php  | 50 ++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 66 insertions(+)
 create mode 100644 Dockerfile
 create mode 100755 index.php

diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..be4b567
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,16 @@
+FROM debian:12-slim
+RUN apt-get update && apt-get upgrade -y
+RUN apt-get install -y \
+    apache2 \
+    php\
+    php-opcache\
+    php-yaml \
+    php-mbstring \
+    php-curl
+
+
+RUN rm -rf /var/www/html/index.html
+ADD index.php /var/www/html/index.php
+
+
+ENTRYPOINT ["/usr/sbin/apache2ctl", "-D", "FOREGROUND"]
\ No newline at end of file
diff --git a/index.php b/index.php
new file mode 100755
index 0000000..8a55965
--- /dev/null
+++ b/index.php
@@ -0,0 +1,50 @@
+<?php
+$config = yaml_parse_file("../config.yaml");
+$remoteIp = $_SERVER["REMOTE_ADDR"];
+$reverseDns = gethostbyaddr($remoteIp);
+$match = false;
+foreach ($config["allowed_sender"] as $host) {
+    if (fnmatch($host, $remoteIp)) {
+        echo "match $host, $remoteIp\n";
+        $match = true;
+        break;
+    }
+    $forwardResolve = gethostbyname($reverseDns);
+    if ($forwardResolve != $remoteIp) {
+        header(
+            "X-Auth: reverse dns of $remoteIp ($reverseDns) does not resolve to $remoteIp ($forwardResolve)"
+        );
+        continue;
+    }
+    if (fnmatch($host, $reverseDns)) {
+        echo "match $host, $reverseDns\n";
+        $match = true;
+        break;
+    }
+}
+if (!$match) {
+    header("HTTP/1.0 403 Forbidden");
+    die("403 Forbidden");
+}
+send("$reverseDns: " . file_get_contents("php://input"), $config);
+
+function send($message, $config)
+{
+    $target = $config["matrix"]["target"];
+    $token = $config["matrix"]["token"];
+    $ch = curl_init();
+    curl_setopt(
+        $ch,
+        CURLOPT_URL,
+        "https://matrix.c3re.de/_matrix/client/r0/rooms/$target/send/m.room.message/123?access_token=$token"
+    );
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+    curl_setopt(
+        $ch,
+        CURLOPT_POSTFIELDS,
+        json_encode(["msgtype" => "m.text", "body" => $message])
+    );
+    curl_setopt($ch, CURLOPT_POST, 1);
+    curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "PUT");
+    curl_exec($ch);
+}