v0.2.0-alpha #2

scriptos · 2026-04-05T17:42:54Z

scriptos commented

2026-04-05 17:42:54 +00:00

No description provided.

scriptos added 4 commits 2026-04-05 17:42:55 +00:00

refactor: convert force_password_change to standalone layout (no sidebar) ea3e7e71ca

add build to docker-compose c2d4148de6

security: fix data loss on container restart due to relative paths bb3bf0330f

Root cause: .env.example used relative paths (./data/...) which resolve
to /app/data/ inside the container instead of the persistent volume at
/data/. This caused the database to be recreated on every container
restart, resetting the admin password to a new initial value.

Fixes:
- .env.example: comment out path settings with clear warning about
  relative paths; Dockerfile already provides correct absolute defaults
- auth: add initial_setup_complete flag in settings table as
  defence-in-depth so EnsureAdmin never re-creates an admin after
  the initial setup, even if the users table is unexpectedly empty
- main: add validateDataPaths() startup check that warns when relative
  container paths are detected (potential data-loss misconfiguration)
- auth_test: extend TestEnsureAdmin to verify the flag prevents
  admin re-creation after user deletion

fix: add entrypoint.sh to fix /data permission denied on bind-mount

PR Tests / Lint, Build & Test (pull_request) Has been cancelled

Details

Security Scan / Go Vulnerability Check (pull_request) Has been cancelled

Details

be05dd5eac

scriptos added 1 commit 2026-04-05 17:45:53 +00:00

docs: add container registry URL to deployment docs and README

PR Tests / Lint, Build & Test (pull_request) Successful in 5m0s

Details

Security Scan / Go Vulnerability Check (pull_request) Successful in 4m46s

Details

025d23e5a6

scriptos merged commit 0fcd99a191 into master

2026-04-05 17:56:48 +00:00

scriptos referenced this issue from a commit

2026-04-05 17:56:50 +00:00

Merge pull request 'v0.2.0-alpha' (#2) from v0.2.0-alpha into master

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: scriptos/keywarden#2