From e6aa8fa4d117692f0b2e91b2de7fd3ec418387fa Mon Sep 17 00:00:00 2001
From: Luke Murphy <lukewm@riseup.net>
Date: Sat, 21 Mar 2020 23:43:54 +0100
Subject: [PATCH] Add subcommand

---
 subcommands/add-vault-password | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100755 subcommands/add-vault-password

diff --git a/subcommands/add-vault-password b/subcommands/add-vault-password
new file mode 100755
index 0000000..4ab846d
--- /dev/null
+++ b/subcommands/add-vault-password
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
+
+source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
+
+ansible_add_vault_password_cmd() {
+  #shellcheck disable=SC2034
+  declare desc="insert new vault password for encrypt/decrypt of passwords"
+
+  if [[ -f "$DOKKU_LIB/data/ansible/.vault-password" ]]; then
+    dokku_col_log_info1_quiet "Vault password already in place"
+    exit 0
+  fi
+
+  read -srp "Vault password", vault_password
+
+  if [[ -d "$DOKKU_LIB/data/ansible" ]]; then
+    dokku_col_log_info1_quiet "Creating $DOKKU_LIB/data/ansible"
+    mkdir -p "$DOKKU_LIB/data/ansible"
+  fi
+
+  dokku_col_log_info1_quiet "Generating $DOKKU_LIB/data/ansible/.vault-password"
+  echo "$vault_password" > "$DOKKU_LIB/data/ansible/.vault-password"
+
+}
+
+ansible_add_vault_password_cmd "$@"