From 0c87745fb408af11f29ff9a508af9b76c98b62cd Mon Sep 17 00:00:00 2001
From: Marc Ahlgrim <marc@onemarcfifty.com>
Date: Mon, 12 Sep 2022 09:54:34 +0200
Subject: [PATCH] added mariadb to docker stack

Signed-off-by: Marc Ahlgrim <marc@onemarcfifty.com>
---
 .gitignore                                 |  1 +
 ansible-rundeck-docker/Dockerfile          | 16 ++++++++--
 ansible-rundeck-docker/docker-compose.yaml | 19 ++++++++++--
 ansible-rundeck-docker/pre-install.sh      | 36 ++++++++++++++++++++++
 examples/playbooks/deploy-ansible.yaml     |  2 +-
 5 files changed, 68 insertions(+), 6 deletions(-)
 create mode 100644 .gitignore
 create mode 100755 ansible-rundeck-docker/pre-install.sh

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..4c49bd7
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+.env
diff --git a/ansible-rundeck-docker/Dockerfile b/ansible-rundeck-docker/Dockerfile
index f7d897f..7f4d78e 100644
--- a/ansible-rundeck-docker/Dockerfile
+++ b/ansible-rundeck-docker/Dockerfile
@@ -5,17 +5,29 @@ FROM rundeck/rundeck:4.4.0
 
 USER root
 
+ENV DEBIAN_FRONTEND noninteractive
 RUN apt-get -y update && \
     apt-get -y install \
         apt-transport-https \
-        python3-pip
+        python3-pip \
+        sudo \
+        wget \
+        curl \
+        git \
+        nmap
 
 RUN pip install --upgrade pip
-
 RUN pip install ansible
 
+RUN wget https://github.com/coder/code-server/releases/download/v4.6.0/code-server_4.6.0_amd64.deb
+RUN apt -y install ./code-server_4.6.0_amd64.deb
+
 USER rundeck
 
+# now make sure the vscode server gets started at runtime
+RUN echo 'export PASSWORD=$VSCODE_PASSWORD' >docker-lib/includes/120_vscode.sh
+RUN echo 'pidof node || /usr/bin/code-server --host 0.0.0.0 &' >>docker-lib/includes/120_vscode.sh
+RUN chmod 755 docker-lib/includes/120_vscode.sh
 
 #VOLUME ["/home/rundeck/server/data"]
 
diff --git a/ansible-rundeck-docker/docker-compose.yaml b/ansible-rundeck-docker/docker-compose.yaml
index 2d11b4b..ca570cb 100644
--- a/ansible-rundeck-docker/docker-compose.yaml
+++ b/ansible-rundeck-docker/docker-compose.yaml
@@ -5,10 +5,23 @@ version: '3'
 services:
 
     rundeck:
-        build: .
+        build:
+            context: .
         container_name: rundeck
         restart: on-failure:5
-        environment:
-            RUNDECK_GRAILS_URL: http://127.0.0.1:4440
+        links:
+            - mariadb
+        depends_on:
+            - mariadb
+        env_file:
+            .env
         ports:
             - 4440:4440
+            - 8080:8080
+    mariadb:
+        image: mariadb:10.5.8
+        container_name: mariadb
+        restart: on-failure:5
+        env_file:
+            .env
+
diff --git a/ansible-rundeck-docker/pre-install.sh b/ansible-rundeck-docker/pre-install.sh
new file mode 100755
index 0000000..bedab0f
--- /dev/null
+++ b/ansible-rundeck-docker/pre-install.sh
@@ -0,0 +1,36 @@
+#!/bin/bash
+
+# this script creates random passwords
+# and updates the .env file
+
+# create a new environment file
+
+# random password for Database connection
+RANDOMPASSWORD=`date +%s | sha256sum | base64 | head -c 32`
+
+# the hostname which we can use in order to access rundeck
+# from the outside.
+# we set this to the hostname of the docker host
+GRAILS_HOST_NAME=`hostname`
+
+(cat >.env) <<EOF
+# a random password for database connection
+RUNDECK_DATABASE_USERNAME=rundeck
+RUNDECK_DATABASE_PASSWORD=$RANDOMPASSWORD
+RUNDECK_DATABASE_DRIVER=org.mariadb.jdbc.Driver
+RUNDECK_GRAILS_URL=http://${GRAILS_HOST_NAME}:4440
+RUNDECK_DATABASE_URL=jdbc:mysql://mariadb/rundeck?autoReconnect=true&useSSL=false
+MARIADB_DATABASE=rundeck
+MYSQL_DATABASE=rundeck
+MARIADB_RANDOM_ROOT_PASSWORD=yes
+MYSQL_RANDOM_ROOT_PASSWORD=yes
+#MARIADB_MYSQL_LOCALHOST_USER=rundeck
+#MARIADB_MYSQL_LOCALHOST_GRANTS=all
+MARIADB_USER=rundeck
+MARIADB_PASSWORD=$RANDOMPASSWORD
+MYSQL_USER=rundeck
+MYSQL_PASSWORD=$RANDOMPASSWORD
+VSCODE_PASSWORD=onemarcfifty
+EOF
+
+RANDOMPASSWORD="nothing here"
diff --git a/examples/playbooks/deploy-ansible.yaml b/examples/playbooks/deploy-ansible.yaml
index af3743b..9b8e66e 100644
--- a/examples/playbooks/deploy-ansible.yaml
+++ b/examples/playbooks/deploy-ansible.yaml
@@ -46,7 +46,7 @@
     - name: Add a new user named ansiblessh
       user:
           name=ansiblessh
-          password={{ ansiblessh_password }}
+          password={{ ansible_user_password }}
  
     - name: Add ansiblessh user to the sudoers
       copy: