From 8844cd3395b550988ae1494215e36bb54ebd3f86 Mon Sep 17 00:00:00 2001
From: Simon <s.thiessen@local-it.org>
Date: Tue, 21 Jul 2026 17:11:42 +0200
Subject: [PATCH] add rotate_db_pass function

---
 abra.sh | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/abra.sh b/abra.sh
index 21dcf5c..12ae7eb 100644
--- a/abra.sh
+++ b/abra.sh
@@ -107,3 +107,10 @@ fix_mysql() {
 show_plugins() {
   wp "plugin list --fields=name,status,wporg_status,version,update_version,auto_update,tested_up_to,wporg_last_updated"
 }
+
+rotate_db_pass() {
+  DB_PASS=$(cat /run/secrets/db_password)
+  DB_ROOT_PASS=$(cat /run/secrets/db_root_password)
+  echo "ALTER USER 'root'@'localhost' IDENTIFIED BY '${DB_ROOT_PASS}'; ALTER USER 'root'@'%' IDENTIFIED BY '${DB_ROOT_PASS}'; ALTER USER 'wordpress'@'%' IDENTIFIED BY '${DB_PASS}'; FLUSH PRIVILEGES;" | mysql -u root --skip-password 2>/dev/null \
+    || echo "ALTER USER 'root'@'localhost' IDENTIFIED BY '${DB_ROOT_PASS}'; ALTER USER 'root'@'%' IDENTIFIED BY '${DB_ROOT_PASS}'; ALTER USER 'wordpress'@'%' IDENTIFIED BY '${DB_PASS}'; FLUSH PRIVILEGES;" | mysql -u root -p"${DB_ROOT_PASS}"
+}
\ No newline at end of file