@liberstudio/cloudflare-list 2.3.6 → 2.3.9

package/README.md

@@ -76,6 +76,7 @@ import { CloudflareAttacksModule } from "@liberstudio/cloudflare-list";
       excludedPaths: ["/api/health", "/api/webhook"],
       silentPaths:   ["/auth/me", "/auth/refresh"],
       verbose: false,
+      whatsappNotify: { phone: "393331234567" },
     }),
   ],
 })
@@ -102,6 +103,9 @@ import { CloudflareAttacksModule } from "@liberstudio/cloudflare-list";
         excludedPaths: ["/api/health", "/api/webhook", /^\/api\/public\/.*/],
         silentPaths:   ["/auth/me", "/auth/refresh"],
         verbose: false,
+        whatsappNotify: {
+          phone: config.getOrThrow<string>("WA_NOTIFY_PHONE"),
+        },
       }),
     }),
   ],
@@ -124,6 +128,33 @@ export class AppModule {}
 | `excludedPaths` | `(string \| RegExp)[]` | no | Path esclusi da ogni rilevamento e log |
 | `silentPaths` | `(string \| RegExp)[]` | no | Path bloccati su Cloudflare ma senza log su file |
 | `verbose` | `boolean` | no | Se `true`, il log include body, query, params e stack |
+| `whatsappNotify` | `{ phone: string }` | no | Invia una notifica WhatsApp quando un IP viene bannato |
+
+### `whatsappNotify` — notifiche ban su WhatsApp
+
+Quando configurato, invia un messaggio WhatsApp ad un numero specifico ogni volta che un IP viene bloccato su Cloudflare. Richiede le variabili d'ambiente `WA_URL`, `WA_USER`, `WA_PASSWORD` e `CLOUDFLARE_WA_DEVICE_ID` già presenti nel progetto (lette automaticamente da `process.env`).
+
+```typescript
+whatsappNotify: {
+  phone: "393331234567", // numero con prefisso internazionale, senza +
+}
+```
+
+Il messaggio inviato sarà:
+```
+🚨 IP bannato su Cloudflare
+IP: 1.2.3.4
+Subnet bloccata: 1.2.0.0/16
+```
+
+Variabili d'ambiente richieste (lette automaticamente da `process.env`):
+```env
+WA_URL=https://messaggistica.liberdesign.eu
+WA_USER=your-user
+WA_PASSWORD=your-password
+CLOUDFLARE_WA_DEVICE_ID=your-device-id
+WA_NOTIFY_PHONE=393331234567
+```
 
 ### `allowedIps` — whitelist server
 

package/dist/attacks.service.d.ts

@@ -8,6 +8,7 @@ export declare class AttacksService {
     private readonly ASN_LOOKUP_URL;
     constructor(httpService: HttpService, options: CloudflareAttacksOptions);
     blockIp(rawIp: string): Promise<CloudflareResponse | null>;
+    private sendWhatsappNotification;
     private lookupAsnRange;
     updateIpList(cidr: string): Promise<CloudflareResponse>;
 }

package/dist/attacks.service.js

@@ -41,13 +41,36 @@ let AttacksService = class AttacksService {
         }
         const asnRange = await this.lookupAsnRange(rawIp);
         if (asnRange) {
-            this.logger.log(`ASN range trovato per ${rawIp}: ${asnRange} — blocco intera subnet`);
-            return this.updateIpList(asnRange);
+            this.logger.error(`ASN range trovato per ${rawIp}: ${asnRange} — blocco intera subnet`);
+            const result = await this.updateIpList(asnRange);
+            this.sendWhatsappNotification(rawIp, asnRange);
+            return result;
         }
         const cidr = (0, utils_1.normalizeIp)(rawIp);
         if (!cidr)
             throw new Error(`IP non valido: ${rawIp}`);
-        return this.updateIpList(cidr);
+        const result = await this.updateIpList(cidr);
+        this.sendWhatsappNotification(rawIp, cidr);
+        return result;
+    }
+    sendWhatsappNotification(rawIp, cidr) {
+        const wa = this.options.whatsappNotify;
+        if (!wa)
+            return;
+        const url = process.env["WA_URL"];
+        const user = process.env["WA_USER"];
+        const password = process.env["WA_PASSWORD"];
+        const deviceId = process.env["CLOUDFLARE_WA_DEVICE_ID"];
+        if (!url || !user || !password || !deviceId) {
+            this.logger.warn("Notifica WhatsApp saltata: WA_URL, WA_USER, WA_PASSWORD o CLOUDFLARE_WA_DEVICE_ID mancanti");
+            return;
+        }
+        const auth = Buffer.from(`${user}:${password}`).toString("base64");
+        const message = `🚨 IP bannato su Cloudflare\nIP: ${rawIp}\nSubnet bloccata: ${cidr}`;
+        (0, rxjs_1.firstValueFrom)(this.httpService.post(`${url}/send/message`, { phone: wa.phone, message }, { headers: { Authorization: `Basic ${auth}`, "X-Device-Id": deviceId } })).catch((err) => {
+            const msg = err instanceof Error ? err.message : "Errore sconosciuto";
+            this.logger.warn(`Notifica WhatsApp fallita: ${msg}`);
+        });
     }
     async lookupAsnRange(ip) {
         try {
@@ -61,7 +84,7 @@ let AttacksService = class AttacksService {
     async updateIpList(cidr) {
         const { accountId, listId, apiToken, comment } = this.options;
         const url = `${this.API_URL}/${accountId}/rules/lists/${listId}/items`;
-        this.logger.log(`Aggiungo ${cidr} alla lista Cloudflare`);
+        this.logger.error(`Aggiungo ${cidr} alla lista Cloudflare`);
         const body = [{ ip: cidr, comment }];
         try {
             const response = await (0, rxjs_1.firstValueFrom)(this.httpService.post(url, body, {

package/dist/interfaces/cloudflare-attacks.interface.d.ts

@@ -1,3 +1,6 @@
+export interface WhatsappNotifyOptions {
+    phone: string;
+}
 export interface CloudflareAttacksOptions {
     apiToken: string;
     accountId: string;
@@ -8,6 +11,7 @@ export interface CloudflareAttacksOptions {
     excludedPaths?: (string | RegExp)[];
     silentPaths?: (string | RegExp)[];
     verbose?: boolean;
+    whatsappNotify?: WhatsappNotifyOptions;
 }
 export interface CloudflareAttacksAsyncOptions {
     imports?: any[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@liberstudio/cloudflare-list",
-  "version": "2.3.6",
+  "version": "2.3.9",
   "description": "Modulo NestJS per gestione IP List Cloudflare",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -16,7 +16,7 @@
     "build": "npx tsc",
     "prepublishOnly": "npm run build",
     "version:bump": "npx tsx src/scripts/version-bump.ts",
-    "pub": "npm publish --access public"
+    "pub": "npm run build && npm publish --access public"
   },
   "publishConfig": {
     "access": "public"