Skip to content

v2.7.4 - Configurable Password Policy

Choose a tag to compare

@Kha-kis Kha-kis released this 05 Feb 17:04
· 373 commits to main since this release

Added

  • Configurable Password Policy - New PASSWORD_POLICY environment variable allows choosing between strict (default, requires uppercase/lowercase/number/special character) and relaxed (8+ characters only, passphrase-friendly) password requirements. Enables secure passphrases like "correct horse battery staple" (#83, #84)

Changed

  • Password validation - Frontend validation now matches backend 128-character maximum limit for consistent user experience
  • Type imports - PasswordPolicy type now imported from @arr/shared package for single source of truth

Configuration

Set via environment variable in Docker:

environment:
  - PASSWORD_POLICY=relaxed  # or "strict" (default)

Full Changelog: v2.7.3...v2.7.4