#!/bin/bash

# this script installs ansible and rundeck on a
# vanilla debian 11
# RUN AS ROOT!

# you might wan to change this
# sets all passwords of users and the vscode server to "onemarcfifty"

USERPASSWORD=onemarcfifty
SERVERURL=rundeck2.lan

# first we install some software

apt update
apt -y upgrade
apt install -y python3 pip sudo wget curl git nmap

# now let's add the rundeck user

useradd -m -G sudo -s /bin/bash rundeck
echo "rundeck:$USERPASSWORD" | chpasswd

# Quick fix: allow sudo to the rundeck user without password
# (needs review) 

echo "rundeck  ALL=(ALL)  NOPASSWD: ALL" >/etc/sudoers.d/rundeck 

# install ansible through pip

pip install ansible
pip install zabbix-api

# download the rundeck installation script and run it directly
# then install rundeck

curl https://raw.githubusercontent.com/rundeck/packaging/main/scripts/deb-setup.sh 2> /dev/null | sudo bash -s rundeck
apt update
apt -y install rundeck

# replace the localhost entries in the config files with the hostname

sed -i s/localhost/$SERVERURL=rundeck2.lan/g /etc/rundeck/framework.properties
sed -i s/localhost/$SERVERURL=rundeck2.lan/g /etc/rundeck/rundeck-config.properties

# install mariadb
apt install -y mariadb-server
# create rundeck db
mysql -u root -e 'create database rundeck'
# create user, random pass and grant access
RANDOMPASSWORD=`date +%s | sha256sum | base64 | head -c 32`
mysql -u root -e "create user rundeck@localhost identified by '$RANDOMPASSWORD'"
mysql -u root -e 'grant ALL on rundeck.* to rundeck@localhost'

# update the rundeck config
# comment out the original data source

sed -i s/^dataSource.url/\#dataSource.url/g /etc/rundeck/rundeck-config.properties

# point the datasource to the new local mariadb installation

(cat >> /etc/rundeck/rundeck-config.properties) <<EOF
dataSource.driverClassName = org.mariadb.jdbc.Driver
dataSource.url = jdbc:mysql://localhost/rundeck?autoReconnect=true&useSSL=false
dataSource.username = rundeck
dataSource.password = $RANDOMPASSWORD
EOF
RANDOMPASSWORD="nothing here"

# start rundeck services

/etc/init.d/rundeckd start
systemctl enable rundeckd

# now let's install visual studio code server (vscode-server)

wget https://github.com/coder/code-server/releases/download/v4.6.0/code-server_4.6.0_amd64.deb
sudo apt install ./code-server_4.6.0_amd64.deb

# now we need to configure a systemd unit file so that
# code-server starts automatically
# please note that this uses http unencrypted.
# You might want to tweak this for added security

(cat >/etc/systemd/system/code-server.service) <<EOF
[Unit]
Description=code-server
After=networking.service

[Service]
Type=simple
User=rundeck
Environment=PASSWORD=$USERPASSWORD
WorkingDirectory=/var/lib/rundeck
ExecStart=/usr/bin/code-server --host 0.0.0.0 --disable-telemetry

[Install]
WantedBy=multi-user.target
EOF

systemctl daemon-reload
systemctl enable code-server.service
systemctl start code-server.service