Files
Axel Uhl c37c5f5502 bug6312: allow operators to set the initial admin password via SAILING_ADMIN_INITIAL_PASSWORD
When a fresh instance starts with an empty security store (one that does
not replicate its security service from a master), initEmptyStore() creates
the default "admin" user. Until now this always used the well-known password
"admin", created the account without enforcing a strong password, and logged
the password in cleartext.

Operators can now set the SAILING_ADMIN_INITIAL_PASSWORD environment variable
to supply the initial admin password. When set to a non-blank value, that
value is used and a strong password is enforced; the password value is never
logged. When unset, the previous "admin" default is kept for backward
compatibility (test / docker-deploy / CI) but a security warning is logged
recommending the variable be set, and noting that future versions may require
it. The cleartext password is no longer logged in either case.

This is opt-in and non-breaking; forcing the variable is left to a later
change after a deprecation period.

Assisted-By: Claude (Opus)
2026-10-04 23:00:56 +02:00
..
2026-01-16 13:09:37 +01:00