Skip to content

v13.3.1 - Setup Fixes

Choose a tag to compare

View all tags
@level09 level09 released this 14 Oct 20:52
· 9 commits to master since this release
v13.3.1
0678c6c
This commit was signed with the committer’s verified signature.
level09 Nidal Al
SSH Key Fingerprint: MGOhMcWBEqb1R9sO5oHTLn2s5Cf3afvTT+kq3KbgNwc
Verified
Learn about vigilant mode.

Fixed

  • Rerunning setup.sh on an existing .env regenerated SECRET_KEY, the password salt and the TOTP secrets, which broke every stored password and 2FA enrollment. With --docker it also rotated DB_PASSWORD, which Postgres only reads when its volume is first created. Setup now keeps all of these, plus REDIS_PASSWORD, and moves other edits to the backup.
  • .env and its backups are created with mode 600 instead of being readable by every user on the machine.
  • Added .flaskenv so flask commands work with a .env that doesn't set FLASK_APP.

Upgrade notes

  • Tighten an existing .env: chmod 600 .env .env.backup.*
Assets 2
Loading