Check SSL expiry for domains in Notion and warn on Telegram

from datetime import datetime, timezone
from clickruntime import on_trigger, credentials, http

DOMAINS_DB, CHAT_ID = "your-notion-database-id", "your-telegram-chat-id"

def expiry(domain):
    entries = http.get("https://crt.sh/", params={"q": domain, "output": "json"}, timeout=30).json()
    dates = [e["not_after"] for e in entries if domain in e.get("name_value", "").splitlines()]
    return datetime.fromisoformat(max(dates)).replace(tzinfo=timezone.utc)

@on_trigger
def run(event):
    notion = {"Authorization": f"Bearer {credentials.connection('notion', 'work')}", "Notion-Version": "2022-06-28"}
    pages = http.post(f"https://api.notion.com/v1/databases/{DOMAINS_DB}/query", headers=notion, json={"page_size": 100}).json()["results"]
    warnings = []
    for p in pages:
        title = p["properties"]["Name"]["title"]
        domain = title[0]["plain_text"].strip() if title else ""
        if not domain:
            continue
        try:
            expires = expiry(domain)
        except Exception:
            warnings.append(f"{domain}: no certificate found")
            continue
        http.patch(f"https://api.notion.com/v1/pages/{p['id']}", headers=notion, json={"properties": {"Expires": {"date": {"start": expires.date().isoformat()}}}})
        days = (expires - datetime.now(timezone.utc)).days
        if days < 14:
            warnings.append(f"{domain}: {days} days left")
    if warnings:
        token = credentials.secret("TELEGRAM_BOT_TOKEN")
        http.post(f"https://api.telegram.org/bot{token}/sendMessage", json={"chat_id": CHAT_ID, "text": "🔒 SSL expiring soon:\n" + "\n".join(warnings)})
    return {"checked": len(pages), "warnings": len(warnings)}