Get Telegram warnings before SSL certificates expire

from datetime import datetime, timezone
from google.oauth2.credentials import Credentials
from googleapiclient.discovery import build
from clickruntime import on_trigger, credentials, http

SHEET_ID = "your-spreadsheet-id"
CHAT_ID = "your-telegram-chat-id"

def expiry(domain):
    entries = http.get("https://crt.sh/", params={"q": domain, "output": "json"}, timeout=30).json()
    dates = [e["not_after"] for e in entries if domain in e.get("name_value", "").splitlines()]
    return datetime.fromisoformat(max(dates)).replace(tzinfo=timezone.utc)

def days_left(domain):
    return (expiry(domain) - datetime.now(timezone.utc)).days

@on_trigger
def run(event):
    sheets = build("sheets", "v4", credentials=Credentials(credentials.connection("google", "work")), cache_discovery=False).spreadsheets()
    domains = [r[0].strip() for r in sheets.values().get(spreadsheetId=SHEET_ID, range="Domains!A2:A").execute().get("values", []) if r]
    column, warnings = [], []
    for d in domains:
        try:
            left = days_left(d)
        except Exception:
            left = "no certificate found"
        column.append([left])
        if left == "no certificate found" or left < 14:
            warnings.append(f"{d}: {left}" + ("" if left == "no certificate found" else " days left"))
    sheets.values().update(spreadsheetId=SHEET_ID, range=f"Domains!B2:B{len(domains) + 1}", valueInputOption="RAW", body={"values": column}).execute()
    if warnings:
        token = credentials.secret("TELEGRAM_BOT_TOKEN")
        http.post(f"https://api.telegram.org/bot{token}/sendMessage", json={"chat_id": CHAT_ID, "text": "🔒 SSL expiring soon:\n" + "\n".join(warnings)})
    return {"checked": len(domains), "warnings": len(warnings)}