mirror of
https://github.com/eclipse-sailing-analytics/sailing-analytics.git
synced 2026-10-31 16:20:45 +00:00
Axel Uhl
c37c5f5502
When a fresh instance starts with an empty security store (one that does not replicate its security service from a master), initEmptyStore() creates the default "admin" user. Until now this always used the well-known password "admin", created the account without enforcing a strong password, and logged the password in cleartext. Operators can now set the SAILING_ADMIN_INITIAL_PASSWORD environment variable to supply the initial admin password. When set to a non-blank value, that value is used and a strong password is enforced; the password value is never logged. When unset, the previous "admin" default is kept for backward compatibility (test / docker-deploy / CI) but a security warning is logged recommending the variable be set, and noting that future versions may require it. The cleartext password is no longer logged in either case. This is opt-in and non-breaking; forcing the variable is left to a later change after a deprecation period. Assisted-By: Claude (Opus)