ilia/punimtag
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Scrub docs/scripts of example passwords and host paths.
CI / skip-ci-check (pull_request) Successful in 30s
Details
CI / docker-ci (pull_request) Successful in 32s
Details
CI / python-lint (pull_request) Successful in 32s
Details
CI / secret-scan (pull_request) Successful in 39s
Details
CI / viewer-unit (pull_request) Successful in 2m21s
Details
CI / admin-unit (pull_request) Successful in 2m43s
Details
CI / e2e (pull_request) Successful in 3m22s
Details

Browse Source 
Stop shipping punimtag_password / admin defaults in install helpers and
docs; generate secrets at install time; require ADMIN_PASSWORD from env
(with test-only bootstrap in conftest).
This commit is contained in:
ilia
2026-08-05 12:28:56 -04:00
parent 7ac3284e4e
commit cb9e927ad9
25 changed files with 133 additions and 96 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/DEPLOYMENT.md
+7 -7
View File
@@ -39,7 +39,7 @@ This guide covers deployment of PunimTag to development and production environme
**Development Database:**
- **Host**: `<db-host>`
- **Port**: 5432
- **User**: ladmin
- **User**: <db-user>
- **Password**: [Contact administrator for password]
---
@@ -125,13 +125,13 @@ Set the following variables:
```bash
# Development Database
DATABASE_URL=postgresql+psycopg2://ladmin:[PASSWORD]@<db-host>:5432/punimtag
DATABASE_URL_AUTH=postgresql+psycopg2://ladmin:[PASSWORD]@<db-host>:5432/punimtag_auth
DATABASE_URL=postgresql+psycopg2://<db-user>:[PASSWORD]@<db-host>:5432/punimtag
DATABASE_URL_AUTH=postgresql+psycopg2://<db-user>:[PASSWORD]@<db-host>:5432/punimtag_auth
# JWT Secrets (change in production!)
SECRET_KEY=dev-secret-key-change-in-production
ADMIN_USERNAME=admin
ADMIN_PASSWORD=admin
ADMIN_PASSWORD=<choose-a-strong-password>
# Photo storage
PHOTO_STORAGE_DIR=/opt/punimtag/data/uploads
@@ -157,8 +157,8 @@ VITE_API_URL=http://<backend-host>:8000
Create `viewer-frontend/.env`:
```bash
DATABASE_URL=postgresql://ladmin:[PASSWORD]@<db-host>:5432/punimtag
DATABASE_URL_AUTH=postgresql://ladmin:[PASSWORD]@<db-host>:5432/punimtag_auth
DATABASE_URL=postgresql://<db-user>:[PASSWORD]@<db-host>:5432/punimtag
DATABASE_URL_AUTH=postgresql://<db-user>:[PASSWORD]@<db-host>:5432/punimtag_auth
NEXTAUTH_URL=http://<backend-host>:3001
NEXTAUTH_SECRET=dev-secret-key-change-in-production
```
@@ -501,7 +501,7 @@ curl http://localhost:8000/api/v1/health
redis-cli ping
# PostgreSQL
psql -h <db-host> -U ladmin -d punimtag -c "SELECT 1;"
psql -h <db-host> -U <db-user> -d punimtag -c "SELECT 1;"
```
---