v2.7.4 - Configurable Password Policy
Added
- Configurable Password Policy - New
PASSWORD_POLICYenvironment variable allows choosing betweenstrict(default, requires uppercase/lowercase/number/special character) andrelaxed(8+ characters only, passphrase-friendly) password requirements. Enables secure passphrases like "correct horse battery staple" (#83, #84)
Changed
- Password validation - Frontend validation now matches backend 128-character maximum limit for consistent user experience
- Type imports -
PasswordPolicytype now imported from@arr/sharedpackage for single source of truth
Configuration
Set via environment variable in Docker:
environment:
- PASSWORD_POLICY=relaxed # or "strict" (default)Full Changelog: v2.7.3...v2.7.4