scriptos/keywarden

v0.2.0-alpha #2

Merged

scriptos merged 5 commits from v0.2.0-alpha into master

2026-04-05 17:56:48 +00:00

Author	SHA1	Message	Date
scriptos	025d23e5a6	docs: add container registry URL to deployment docs and README PR Tests / Lint, Build & Test (pull_request) Successful in 5m0s Details Security Scan / Go Vulnerability Check (pull_request) Successful in 4m46s Details	2026-04-05 19:45:47 +02:00
scriptos	be05dd5eac	fix: add entrypoint.sh to fix /data permission denied on bind-mount PR Tests / Lint, Build & Test (pull_request) Has been cancelled Details Security Scan / Go Vulnerability Check (pull_request) Has been cancelled Details	2026-04-05 19:42:18 +02:00
scriptos	bb3bf0330f	security: fix data loss on container restart due to relative paths Root cause: .env.example used relative paths (./data/...) which resolve to /app/data/ inside the container instead of the persistent volume at /data/. This caused the database to be recreated on every container restart, resetting the admin password to a new initial value. Fixes: - .env.example: comment out path settings with clear warning about relative paths; Dockerfile already provides correct absolute defaults - auth: add initial_setup_complete flag in settings table as defence-in-depth so EnsureAdmin never re-creates an admin after the initial setup, even if the users table is unexpectedly empty - main: add validateDataPaths() startup check that warns when relative container paths are detected (potential data-loss misconfiguration) - auth_test: extend TestEnsureAdmin to verify the flag prevents admin re-creation after user deletion	2026-04-05 19:21:15 +02:00
scriptos	c2d4148de6	add build to docker-compose	2026-04-05 19:12:44 +02:00
scriptos	ea3e7e71ca	refactor: convert force_password_change to standalone layout (no sidebar)	2026-04-05 19:03:32 +02:00