avm/hassio-addons
1
0
Fork 0
mirror of https://github.com/alexbelgium/hassio-addons.git synced 2026-10-20 06:50:10 +02:00
Code Issues Packages Projects Releases Wiki Activity

wger: keep SECRET_KEY when JWT generation fails, log its errors

Browse Source 
Generate each secret only when missing instead of rewriting the file, so a
failed key generation no longer rotates SECRET_KEY on every boot.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
BirdNET-Go Addon Builder
2026-10-17 12:03:02 +02:00
parent a33d5240b7
commit 4a6ca551d8
1 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
wger/rootfs/etc/cont-init.d/90-run.sh
View File

@@ -71,13 +71,12 @@ migrate_database
echo "... generate persistent secrets"
# Without JWT keys the mobile app login fails with a 500, and without SECRET_KEY
# sessions are lost at every restart. Generated once, env_vars still override them.
if ! grep -qs '^JWT_PRIVATE_KEY=' /data/secrets.env; then
{
echo "SECRET_KEY=$(python3 -c 'import secrets; print(secrets.token_urlsafe(50))')"
(cd /home/wger/src && sudo -u wger -E HOME=/home/wger python3 manage.py generate-jwt-keys 2> /dev/null | grep '^JWT_')
} > /data/secrets.env || bashio::log.warning "Unable to generate JWT keys"
chmod 600 /data/secrets.env
fi
grep -qs '^SECRET_KEY=' /data/secrets.env ||
echo "SECRET_KEY=$(python3 -c 'import secrets; print(secrets.token_urlsafe(50))')" >> /data/secrets.env
grep -qs '^JWT_PRIVATE_KEY=' /data/secrets.env ||
(cd /home/wger/src && sudo -u wger -E HOME=/home/wger python3 manage.py generate-jwt-keys | grep '^JWT_') >> /data/secrets.env ||
bashio::log.warning "Unable to generate JWT keys"
chmod 600 /data/secrets.env
echo "... add env variables"
(