set default creds back to admin admin

Overlord-Server/.env.example

@@ -10,8 +10,8 @@ HOST=0.0.0.0
 
 # Authentication
 OVERLORD_USER=admin
-# Leave empty to auto-generate and persist in ./data/save.json
-OVERLORD_PASS=
+# Default bootstrap password is "admin" unless you override it
+OVERLORD_PASS=admin
 
 # Optional overrides. Leave empty to auto-generate and persist in ./data/save.json
 JWT_SECRET=

Overlord-Server/src/config.ts

@@ -37,7 +37,7 @@ export interface Config {
 const DEFAULT_CONFIG: Config = {
   auth: {
     username: "admin",
-    password: "",
+    password: "admin",
     jwtSecret: "",
     agentToken: "",
   },
@@ -170,13 +170,6 @@ export function loadConfig(): Config {
     passwordFromConfig ||
     savedSecrets.auth?.bootstrapPassword ||
     DEFAULT_CONFIG.auth.password;
-  if (!finalBootstrapPassword) {
-    finalBootstrapPassword = generateRandomSecret(28);
-    saveChanged = true;
-    logger.info(
-      "No initial admin password provided, generated bootstrap password in save.json",
-    );
-  }
 
   const keywordsEnv = process.env.OVERLORD_NOTIFICATION_KEYWORDS;
   const keywordsFromEnv = keywordsEnv

Overlord-Server/src/users.ts

@@ -85,7 +85,7 @@ if (userCount.count === 0) {
     `[users] Bootstrap login credentials -> username: ${initialUsername} | password: ${initialPassword}`,
   );
   logger.warn(
-    "[users] ⚠️  SECURITY WARNING: Rotate the bootstrap password after first login. If it was auto-generated, retrieve it from data/save.json.",
+    "[users] SECURITY WARNING: Rotate the bootstrap password after first login. Default bootstrap credentials are admin/admin unless overridden by configuration.",
   );
 }