rafraa/TX
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add secure generation and display of initial user credentials

Browse Source 
Add logic to `start.sh` to generate and display initial admin and user passwords, and update `docker-compose.yml` to use these generated passwords.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 77cfe984-2c65-4152-bb7a-0df28274fe66
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Event-Id: 55b36940-657f-422c-9cdb-2cec579ea067
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/c3c252e4-c83d-40ca-9fff-99a3ea60701e/77cfe984-2c65-4152-bb7a-0df28274fe66/kI0sxlu
Replit-Helium-Checkpoint-Created: true
This commit is contained in:
riyadhafraa
2026-05-13 19:54:24 +00:00
parent d70ee83a63
commit ea5b3b5836
3 changed files with 34 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
start.sh
+21 -6
View File
@@ -29,16 +29,31 @@ if [ ! -f .env ]; then
if command -v openssl >/dev/null 2>&1; then
SECRET="$(openssl rand -hex 32)"
PG_PW="$(openssl rand -hex 16)"
ADMIN_PW="$(openssl rand -base64 18 | tr -d '/+=' | cut -c1-20)"
USER_PW="$(openssl rand -base64 18 | tr -d '/+=' | cut -c1-20)"
if [[ "$OSTYPE" == "darwin"* ]]; then
sed -i '' "s|^SESSION_SECRET=.*|SESSION_SECRET=${SECRET}|" .env
sed -i '' "s|^POSTGRES_PASSWORD=.*|POSTGRES_PASSWORD=${PG_PW}|" .env
SED_I=(sed -i '')
else
sed -i "s|^SESSION_SECRET=.*|SESSION_SECRET=${SECRET}|" .env
sed -i "s|^POSTGRES_PASSWORD=.*|POSTGRES_PASSWORD=${PG_PW}|" .env
SED_I=(sed -i)
fi
echo "Generated random SESSION_SECRET and POSTGRES_PASSWORD in .env."
"${SED_I[@]}" "s|^SESSION_SECRET=.*|SESSION_SECRET=${SECRET}|" .env
"${SED_I[@]}" "s|^POSTGRES_PASSWORD=.*|POSTGRES_PASSWORD=${PG_PW}|" .env
"${SED_I[@]}" "s|^SEED_ADMIN_PASSWORD=.*|SEED_ADMIN_PASSWORD=${ADMIN_PW}|" .env
"${SED_I[@]}" "s|^SEED_USER_PASSWORD=.*|SEED_USER_PASSWORD=${USER_PW}|" .env
echo
echo "================================================================"
echo " Generated initial credentials (also saved in .env)"
echo "----------------------------------------------------------------"
echo " Admin login: admin / ${ADMIN_PW}"
echo " User login: ahmed / ${USER_PW}"
echo "================================================================"
echo " IMPORTANT: write these down NOW — you can change them later"
echo " from the admin panel, but recovery from a lost admin password"
echo " requires direct database access."
echo "================================================================"
echo
else
echo "openssl not available — please open .env and set SESSION_SECRET + POSTGRES_PASSWORD before running again."
echo "openssl not available — please open .env and set SESSION_SECRET, POSTGRES_PASSWORD, SEED_ADMIN_PASSWORD and SEED_USER_PASSWORD before running again."
exit 1
fi
fi