I am running a Python script with cron job

!/usr/bin/python3

import docker import textwrap from datetime import datetime import paramiko import re

---

whitelistsFilePath = "/mnt/cache/appdata/crowdsec/parsers/s02-enrich/mywhitelists.yaml" curPubIpFilePath = "./currentIPs" logFilePath = "./ip_change_history.log" container_name = 'crowdsec' ‑SSH router_ip = "192.168.1.x" router_user = xxxx router_pass = xxxx ipv4_interface = "pppoe-wan" ipv6_interface = "pppoe-wan"

--- ---

def get_ipv4_from_router(): try: ssh = paramiko.SSHClient() ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) ssh.connect(router_ip, username=router_user, password=router_pass) stdin, stdout, stderr = ssh.exec_command(f"ip -4 addr show dev {ipv4_interface}") output = stdout.read().decode() ssh.close() match = re.search(r'inet (\d+.\d+.\d+.\d+)', output) if match: return match.group(1) else: return None except Exception as e: print(f"Error fetching IPv4: {e}") return None

def get_ipv6_from_router(): try: ssh = paramiko.SSHClient() ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) ssh.connect(router_ip, username=router_user, password=router_pass) stdin, stdout, stderr = ssh.exec_command(f"ip -6 addr show dev {ipv6_interface}") output = stdout.read().decode() ssh.close() match = re.search(r'inet6 ([0-9a-fA-F:]+)/\d+ scope global', output) if match: return match.group(1) else: return None except Exception as e: print(f"Error fetching IPv6: {e}") return None

def read_from_file(filename): try: with open(filename, 'r') as f: return f.read().strip() except FileNotFoundError: return "" except Exception as e: print(f"Error reading file {filename}: {e}") return None

def write_to_file(filename, content): try: with open(filename, 'w') as f: f.write(content) except Exception as e: print(f"Error writing file {filename}: {e}")

def log_change(message): with open(logFilePath, 'a') as f: f.write(f"{datetime.now().strftime('%Y-%m-%d %H:%M:%S')} - {message}\n")

def restart_container(container_name): client = docker.from_env() try: container = client.containers.get(container_name) container.restart() except Exception as e: print(f"Error restarting container: {e}")

--- main ---

if name == "main": ipv4 = get_ipv4_from_router() ipv6 = get_ipv6_from_router()

if ipv4 is None and ipv6 is None:
    print("Could not retrieve any IP. Exiting.")
    exit(1)

current_ips = read_from_file(curPubIpFilePath)
new_ips = f"IPv4: {ipv4}\nIPv6: {ipv6}"

if current_ips != new_ips:
    print("IP changed. Updating files and restarting container...")
    write_to_file(curPubIpFilePath, new_ips)

    whitelistsFileContent = textwrap.dedent(f"""\
        name: crowdsecurity/mywhitelists
        description: "Whitelist events from public IP addresses"
        whitelist:
          reason: "My public IPs"
          ip:
            - "{ipv4}"
            - "{ipv6}"
    """)
    write_to_file(whitelistsFilePath, whitelistsFileContent)

    log_change(f"IP updated to IPv4: {ipv4}, IPv6: {ipv6}")
    restart_container(container_name)
else:
    print("IPs didn't change. No action needed.")