Merge pull request 'Update documentation/Dockerfile' (#292) from fenix-admin into dev

Reviewed-on: fenix-gitea-admin/iac-opentofu-private#292

.gitea/workflows/ci-test.yaml

@@ -35,6 +35,11 @@ jobs:
         run: |
           apt-get update -y
 
+      - name: Install setup
+        run: |
+          apt install -y curl jq
+          curl -fsSL https://deb.nodesource.com/setup_18.x
+
       - name: Cloning iac repository
         uses: actions/checkout@v4
         with:
@@ -60,7 +65,8 @@ jobs:
 
       - name: Install dante-server
         run: |
-          apt-get install -y dante-server
+          apt-get install -y dante-server openssl 
+          #libssl1.1
 
 
       - name: Configure dante-server
@@ -85,12 +91,17 @@ jobs:
 
 
       - name: vaultwarden urls as secrets
-        working-directory: 
         run: |
+          echo "config"
+          echo "$VAULTWARDEN_LINK"
           bw config server $VAULTWARDEN_LINK
+          echo "login"
           bw login --apikey
+          echo "session"
           BW_SESSION=$(bw unlock "$BW_PASSWORD" --raw)
-          
+          echo "$BW_SESSION"
+          echo "getting item"
+          bw get item "iac.proxmox.ssh.link"  --session "$BW_SESSION"
           bw get item "iac.proxmox.ssh.link"  --session "$BW_SESSION"  | jq -r '.notes' > "proxmox-ssh-link.txt"
 
       - name: Start cloudflared Access TCP -> SOCKS5 (background)
@@ -139,6 +150,7 @@ jobs:
         working-directory: infra/iac
         run: |
           BW_SESSION=$(bw unlock "$BW_PASSWORD" --raw)
+          echo "$BW_SESSION"
           
           # Ler o arquivo de referência
           for secret in $(jq -c '.secrets[]' secrets/vault-secrets-map.json); do
@@ -156,6 +168,7 @@ jobs:
             elif [ "$type" == "note" ]; then
               echo "note get"
               bw get item "$name"  --session "$BW_SESSION"  | jq -r '.notes' > "$output"
+              #cat $output
             fi
           done
 

documentation/Dockerfile

@@ -5,19 +5,27 @@ FROM ubuntu:24.04
 # Copy the tofu binary
 COPY --from=tofu /usr/local/bin/tofu /usr/local/bin/tofu
 
-# Install dependencies
+
+# Atualizar pacotes e instalar dependências básicas
 RUN apt-get update && apt-get install -y \
-    git \
     curl \
-    nodejs \
+    git \
-    npm \
     unzip \
+    jq \
+    gnupg \
+    ca-certificates \
     && rm -rf /var/lib/apt/lists/*
 
-RUN curl -L -o /tmp/bw.zip https://github.com/bitwarden/cli/releases/download/v1.22.1/bw-linux-1.22.1.zip \
+# Instalar Node.js 18 via NodeSource
-    && unzip /tmp/bw.zip -d /usr/local/bin \
+RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - && \
-    && chmod +x /usr/local/bin/bw \
+    apt-get install -y nodejs
-    && rm /tmp/bw.zip
 
+# Verificar versões (opcional para debug)
+RUN node -v && npm -v
+
+
+
+
+RUN npm install -g @bitwarden/cli
 
 WORKDIR /workspace

main.tf

@@ -6,7 +6,7 @@ terraform {
     }   
     bitwarden = {
       source  = "maxlaverse/bitwarden"
-      version = ">= 0.15.0"
+      version = ">= 0.16.0"
     } 
     proxmox = {
       source = "bpg/proxmox"

vaultwarden.tf

@@ -25,10 +25,37 @@ resource "vaultwarden_organization_collection" "vaultwarden-collection-iac" {
   name            = "iac-collection"
 }
 
-
 resource "bitwarden_item_login" "administrative-user" {
   name     = "teste"
   username = "teste"
   password = "teste"
   collection_ids  = [vaultwarden_organization_collection.vaultwarden-collection-iac.id]
 }
+
+
+resource "bitwarden_item_secure_note" "hosts-ini" {
+  name            = "iac.ansible.hosts.ini"
+  notes           = <<EOT
+  ${local.hosts_ini}
+EOT
+  organization_id = vaultwarden_organization.vaultwarden-organization-fenix-iac.id
+  collection_ids  = [vaultwarden_organization_collection.vaultwarden-collection-iac.id]
+  reprompt = true 
+}
+
+locals{
+
+  hosts_ini = <<EOT
+
+[master]
+master ansible_host=${var.proxmox_k8s_vms[0].ip} ansible_user=${var.proxmox_k8s_vms[0].extra_users[0].name} ansible_ssh_pass=${var.proxmox_k8s_vms[0].extra_users[0].password}
+
+[workers]
+%{ for i, vm in var.proxmox_k8s_vms ~}
+%{ if i != 0 }
+worker-${replace(vm.ip, ".", "-")} ansible_host=${vm.ip} ansible_user=${vm.extra_users[0].name} ansible_ssh_pass=${vm.extra_users[0].password}
+%{ endif }  
+%{ endfor }
+
+EOT
+  }