switched to fully self contained docker

migrations/001_initial.sql

@@ -1,103 +1,125 @@
-CREATE TABLE IF NOT EXISTS schema_migrations (
-    version BIGINT UNSIGNED NOT NULL PRIMARY KEY,
-    applied_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6)
-) ENGINE=InnoDB;
+CREATE TABLE technician_sessions (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    token_hash BLOB NOT NULL UNIQUE,
+    csrf_token TEXT NOT NULL,
+    gitea_login TEXT NOT NULL,
+    display_name TEXT NOT NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    expires_at DATETIME NOT NULL,
+    last_seen_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX idx_technician_sessions_expires
+    ON technician_sessions(expires_at);
 
-CREATE TABLE IF NOT EXISTS technician_sessions (
-    id BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
-    token_hash BINARY(32) NOT NULL UNIQUE,
-    csrf_token VARCHAR(64) NOT NULL,
-    gitea_login VARCHAR(255) NOT NULL,
-    display_name VARCHAR(255) NOT NULL,
-    created_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
-    expires_at TIMESTAMP(6) NOT NULL,
-    last_seen_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
-    INDEX idx_technician_sessions_expires (expires_at)
-) ENGINE=InnoDB;
+CREATE TABLE packages (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    slug TEXT NOT NULL UNIQUE,
+    display_name TEXT NOT NULL,
+    package_name TEXT NOT NULL,
+    package_version TEXT NOT NULL,
+    file_name TEXT NOT NULL,
+    sha256 TEXT NOT NULL,
+    enabled INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
 
-CREATE TABLE IF NOT EXISTS packages (
-    id BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
-    slug VARCHAR(100) NOT NULL UNIQUE,
-    display_name VARCHAR(255) NOT NULL,
-    package_name VARCHAR(255) NOT NULL,
-    package_version VARCHAR(100) NOT NULL,
-    file_name VARCHAR(255) NOT NULL,
-    sha256 CHAR(64) NOT NULL,
-    enabled BOOLEAN NOT NULL DEFAULT FALSE,
-    created_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
-    updated_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6)
-        ON UPDATE CURRENT_TIMESTAMP(6)
-) ENGINE=InnoDB;
+CREATE TABLE authorizations (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    code_hash BLOB NOT NULL UNIQUE,
+    code_hint TEXT NOT NULL,
+    created_by TEXT NOT NULL,
+    customer_label TEXT NOT NULL DEFAULT '',
+    host_limit INTEGER NOT NULL CHECK (host_limit > 0),
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    expires_at DATETIME NOT NULL,
+    revoked_at DATETIME
+);
+CREATE INDEX idx_authorizations_expires ON authorizations(expires_at);
+CREATE INDEX idx_authorizations_created_by
+    ON authorizations(created_by, created_at);
 
-CREATE TABLE IF NOT EXISTS authorizations (
-    id BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
-    code_hash BINARY(32) NOT NULL UNIQUE,
-    code_hint VARCHAR(8) NOT NULL,
-    created_by VARCHAR(255) NOT NULL,
-    customer_label VARCHAR(255) NOT NULL DEFAULT '',
-    host_limit INT UNSIGNED NOT NULL,
-    created_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
-    expires_at TIMESTAMP(6) NOT NULL,
-    revoked_at TIMESTAMP(6) NULL,
-    INDEX idx_authorizations_expires (expires_at),
-    INDEX idx_authorizations_created_by (created_by, created_at)
-) ENGINE=InnoDB;
-
-CREATE TABLE IF NOT EXISTS authorization_packages (
-    authorization_id BIGINT UNSIGNED NOT NULL,
-    package_id BIGINT UNSIGNED NOT NULL,
+CREATE TABLE authorization_packages (
+    authorization_id INTEGER NOT NULL,
+    package_id INTEGER NOT NULL,
+    package_slug TEXT NOT NULL,
+    display_name TEXT NOT NULL,
+    package_name TEXT NOT NULL,
+    package_version TEXT NOT NULL,
+    file_name TEXT NOT NULL,
+    sha256 TEXT NOT NULL,
     PRIMARY KEY (authorization_id, package_id),
-    CONSTRAINT fk_authorization_packages_authorization
-        FOREIGN KEY (authorization_id) REFERENCES authorizations(id)
+    FOREIGN KEY (authorization_id) REFERENCES authorizations(id)
         ON DELETE CASCADE,
-    CONSTRAINT fk_authorization_packages_package
-        FOREIGN KEY (package_id) REFERENCES packages(id)
+    FOREIGN KEY (package_id) REFERENCES packages(id)
         ON DELETE RESTRICT
-) ENGINE=InnoDB;
+);
 
-CREATE TABLE IF NOT EXISTS authorization_hosts (
-    id BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
-    authorization_id BIGINT UNSIGNED NOT NULL,
-    host_fingerprint BINARY(32) NOT NULL,
-    hostname VARCHAR(255) NOT NULL,
-    first_seen_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
-    last_seen_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
-    UNIQUE KEY uq_authorization_host (authorization_id, host_fingerprint),
-    CONSTRAINT fk_authorization_hosts_authorization
-        FOREIGN KEY (authorization_id) REFERENCES authorizations(id)
+CREATE TABLE authorization_hosts (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    authorization_id INTEGER NOT NULL,
+    host_fingerprint BLOB NOT NULL,
+    hostname TEXT NOT NULL,
+    first_seen_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    last_seen_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE (authorization_id, host_fingerprint),
+    FOREIGN KEY (authorization_id) REFERENCES authorizations(id)
         ON DELETE CASCADE
-) ENGINE=InnoDB;
+);
 
-CREATE TABLE IF NOT EXISTS download_sessions (
-    id BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
-    token_hash BINARY(32) NOT NULL UNIQUE,
-    authorization_id BIGINT UNSIGNED NOT NULL,
-    authorization_host_id BIGINT UNSIGNED NOT NULL,
-    created_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
-    expires_at TIMESTAMP(6) NOT NULL,
-    revoked_at TIMESTAMP(6) NULL,
-    INDEX idx_download_sessions_expires (expires_at),
-    CONSTRAINT fk_download_sessions_authorization
-        FOREIGN KEY (authorization_id) REFERENCES authorizations(id)
+CREATE TABLE download_sessions (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    token_hash BLOB NOT NULL UNIQUE,
+    authorization_id INTEGER NOT NULL,
+    authorization_host_id INTEGER NOT NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    expires_at DATETIME NOT NULL,
+    revoked_at DATETIME,
+    FOREIGN KEY (authorization_id) REFERENCES authorizations(id)
         ON DELETE CASCADE,
-    CONSTRAINT fk_download_sessions_host
-        FOREIGN KEY (authorization_host_id) REFERENCES authorization_hosts(id)
+    FOREIGN KEY (authorization_host_id) REFERENCES authorization_hosts(id)
         ON DELETE CASCADE
-) ENGINE=InnoDB;
+);
+CREATE INDEX idx_download_sessions_expires ON download_sessions(expires_at);
 
-CREATE TABLE IF NOT EXISTS audit_events (
-    id BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
-    event_type VARCHAR(100) NOT NULL,
-    actor VARCHAR(255) NOT NULL DEFAULT '',
-    authorization_id BIGINT UNSIGNED NULL,
-    hostname VARCHAR(255) NOT NULL DEFAULT '',
-    package_slug VARCHAR(100) NOT NULL DEFAULT '',
-    source_ip VARCHAR(64) NOT NULL DEFAULT '',
+CREATE TABLE audit_events (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    event_type TEXT NOT NULL,
+    actor TEXT NOT NULL DEFAULT '',
+    authorization_id INTEGER,
+    hostname TEXT NOT NULL DEFAULT '',
+    package_slug TEXT NOT NULL DEFAULT '',
+    source_ip TEXT NOT NULL DEFAULT '',
     details TEXT NOT NULL,
-    created_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
-    INDEX idx_audit_created (created_at),
-    INDEX idx_audit_authorization (authorization_id, created_at),
-    INDEX idx_audit_exchange_limit (event_type, source_ip, created_at)
-) ENGINE=InnoDB;
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX idx_audit_created ON audit_events(created_at);
+CREATE INDEX idx_audit_authorization
+    ON audit_events(authorization_id, created_at);
+CREATE INDEX idx_audit_exchange_limit
+    ON audit_events(event_type, source_ip, created_at);
 
-INSERT IGNORE INTO schema_migrations (version) VALUES (1);
+CREATE TABLE installer_actions (
+    slug TEXT NOT NULL PRIMARY KEY,
+    display_name TEXT NOT NULL,
+    sort_order INTEGER NOT NULL DEFAULT 0,
+    enabled INTEGER NOT NULL DEFAULT 1,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE TABLE authorization_actions (
+    authorization_id INTEGER NOT NULL,
+    action_slug TEXT NOT NULL,
+    PRIMARY KEY (authorization_id, action_slug),
+    FOREIGN KEY (authorization_id) REFERENCES authorizations(id)
+        ON DELETE CASCADE,
+    FOREIGN KEY (action_slug) REFERENCES installer_actions(slug)
+        ON DELETE RESTRICT
+);
+
+INSERT INTO installer_actions (slug, display_name, sort_order, enabled)
+VALUES
+    ('install-rmm', 'Install ConnectWise RMM agent', 10, 1),
+    ('install-acronis', 'Install Acronis agent', 20, 1),
+    ('install-screenconnect', 'Install ScreenConnect agent', 30, 1);

migrations/002_installer_actions.sql

@@ -1,58 +0,0 @@
-CREATE TABLE IF NOT EXISTS installer_actions (
-    slug VARCHAR(100) NOT NULL PRIMARY KEY,
-    display_name VARCHAR(255) NOT NULL,
-    sort_order INT UNSIGNED NOT NULL DEFAULT 0,
-    enabled BOOLEAN NOT NULL DEFAULT TRUE,
-    created_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
-    updated_at TIMESTAMP(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6)
-        ON UPDATE CURRENT_TIMESTAMP(6)
-) ENGINE=InnoDB;
-
-CREATE TABLE IF NOT EXISTS authorization_actions (
-    authorization_id BIGINT UNSIGNED NOT NULL,
-    action_slug VARCHAR(100) NOT NULL,
-    PRIMARY KEY (authorization_id, action_slug),
-    CONSTRAINT fk_authorization_actions_authorization
-        FOREIGN KEY (authorization_id) REFERENCES authorizations(id)
-        ON DELETE CASCADE,
-    CONSTRAINT fk_authorization_actions_action
-        FOREIGN KEY (action_slug) REFERENCES installer_actions(slug)
-        ON DELETE RESTRICT
-) ENGINE=InnoDB;
-
-ALTER TABLE authorization_packages
-    ADD COLUMN IF NOT EXISTS package_slug VARCHAR(100) NULL,
-    ADD COLUMN IF NOT EXISTS display_name VARCHAR(255) NULL,
-    ADD COLUMN IF NOT EXISTS package_name VARCHAR(255) NULL,
-    ADD COLUMN IF NOT EXISTS package_version VARCHAR(100) NULL,
-    ADD COLUMN IF NOT EXISTS file_name VARCHAR(255) NULL,
-    ADD COLUMN IF NOT EXISTS sha256 CHAR(64) NULL;
-
-UPDATE authorization_packages ap
-JOIN packages p ON p.id = ap.package_id
-SET ap.package_slug = p.slug,
-    ap.display_name = p.display_name,
-    ap.package_name = p.package_name,
-    ap.package_version = p.package_version,
-    ap.file_name = p.file_name,
-    ap.sha256 = p.sha256
-WHERE ap.package_slug IS NULL;
-
-ALTER TABLE authorization_packages
-    MODIFY package_slug VARCHAR(100) NOT NULL,
-    MODIFY display_name VARCHAR(255) NOT NULL,
-    MODIFY package_name VARCHAR(255) NOT NULL,
-    MODIFY package_version VARCHAR(100) NOT NULL,
-    MODIFY file_name VARCHAR(255) NOT NULL,
-    MODIFY sha256 CHAR(64) NOT NULL;
-
-INSERT INTO installer_actions (slug, display_name, sort_order, enabled)
-VALUES
-    ('install-rmm', 'Install ConnectWise RMM agent', 10, TRUE),
-    ('install-acronis', 'Install Acronis agent', 20, TRUE),
-    ('install-screenconnect', 'Install ScreenConnect agent', 30, TRUE)
-ON DUPLICATE KEY UPDATE
-    display_name = VALUES(display_name),
-    sort_order = VALUES(sort_order);
-
-INSERT IGNORE INTO schema_migrations (version) VALUES (2);

migrations/003_audit_network.sql

@@ -1,9 +0,0 @@
-ALTER TABLE authorization_hosts
-    ADD COLUMN IF NOT EXISTS lan_ip VARCHAR(64) NOT NULL DEFAULT ''
-        AFTER hostname;
-
-ALTER TABLE audit_events
-    ADD COLUMN IF NOT EXISTS lan_ip VARCHAR(64) NOT NULL DEFAULT ''
-        AFTER source_ip;
-
-INSERT IGNORE INTO schema_migrations (version) VALUES (3);

migrations/004_remove_lan_ip.sql

@@ -1,7 +0,0 @@
-ALTER TABLE authorization_hosts
-    DROP COLUMN IF EXISTS lan_ip;
-
-ALTER TABLE audit_events
-    DROP COLUMN IF EXISTS lan_ip;
-
-INSERT IGNORE INTO schema_migrations (version) VALUES (4);