Persist a per-install JWT signing secret instead of a compiled-in default.

Admin tokens were forgeable whenever JWT_SECRET was unset. Prefer the env var, otherwise write a random key to data/.jwt_secret.
2026-08-31 23:55:34 +00:00
parent 466d69c44c
commit 22844a2a67
6 changed files with 106 additions and 7 deletions
@@ -12,6 +12,7 @@ services:
    # user: "0:0"   # required when using PUID/PGID != built-in to allow binary to chown+drop
    # working_dir: /app   # binary uses CWD for relative data/ + data/www/
    # environment:
+    #   - JWT_SECRET=  # optional; otherwise a random secret is stored in data/.jwt_secret
    #   - DATA_DIR=/app/data
    #   - WWW_DIR=/app/data/www
    #   - PUID=1000