set default creds back to admin admin
This commit is contained in:
+2
-2
@@ -21,8 +21,8 @@
|
|||||||
# OVERLORD_USER=myadmin
|
# OVERLORD_USER=myadmin
|
||||||
|
|
||||||
# OPTIONAL: Custom initial admin password
|
# OPTIONAL: Custom initial admin password
|
||||||
# Leave empty to generate and persist to save.json
|
# Default is "admin"
|
||||||
# OVERLORD_PASS=
|
# OVERLORD_PASS=admin
|
||||||
|
|
||||||
# ============================================
|
# ============================================
|
||||||
# OPTIONAL: Custom port
|
# OPTIONAL: Custom port
|
||||||
|
|||||||
@@ -10,8 +10,8 @@ HOST=0.0.0.0
|
|||||||
|
|
||||||
# Authentication
|
# Authentication
|
||||||
OVERLORD_USER=admin
|
OVERLORD_USER=admin
|
||||||
# Leave empty to auto-generate and persist in ./data/save.json
|
# Default bootstrap password is "admin" unless you override it
|
||||||
OVERLORD_PASS=
|
OVERLORD_PASS=admin
|
||||||
|
|
||||||
# Optional overrides. Leave empty to auto-generate and persist in ./data/save.json
|
# Optional overrides. Leave empty to auto-generate and persist in ./data/save.json
|
||||||
JWT_SECRET=
|
JWT_SECRET=
|
||||||
|
|||||||
@@ -37,7 +37,7 @@ export interface Config {
|
|||||||
const DEFAULT_CONFIG: Config = {
|
const DEFAULT_CONFIG: Config = {
|
||||||
auth: {
|
auth: {
|
||||||
username: "admin",
|
username: "admin",
|
||||||
password: "",
|
password: "admin",
|
||||||
jwtSecret: "",
|
jwtSecret: "",
|
||||||
agentToken: "",
|
agentToken: "",
|
||||||
},
|
},
|
||||||
@@ -170,13 +170,6 @@ export function loadConfig(): Config {
|
|||||||
passwordFromConfig ||
|
passwordFromConfig ||
|
||||||
savedSecrets.auth?.bootstrapPassword ||
|
savedSecrets.auth?.bootstrapPassword ||
|
||||||
DEFAULT_CONFIG.auth.password;
|
DEFAULT_CONFIG.auth.password;
|
||||||
if (!finalBootstrapPassword) {
|
|
||||||
finalBootstrapPassword = generateRandomSecret(28);
|
|
||||||
saveChanged = true;
|
|
||||||
logger.info(
|
|
||||||
"No initial admin password provided, generated bootstrap password in save.json",
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
const keywordsEnv = process.env.OVERLORD_NOTIFICATION_KEYWORDS;
|
const keywordsEnv = process.env.OVERLORD_NOTIFICATION_KEYWORDS;
|
||||||
const keywordsFromEnv = keywordsEnv
|
const keywordsFromEnv = keywordsEnv
|
||||||
|
|||||||
@@ -85,7 +85,7 @@ if (userCount.count === 0) {
|
|||||||
`[users] Bootstrap login credentials -> username: ${initialUsername} | password: ${initialPassword}`,
|
`[users] Bootstrap login credentials -> username: ${initialUsername} | password: ${initialPassword}`,
|
||||||
);
|
);
|
||||||
logger.warn(
|
logger.warn(
|
||||||
"[users] ⚠️ SECURITY WARNING: Rotate the bootstrap password after first login. If it was auto-generated, retrieve it from data/save.json.",
|
"[users] SECURITY WARNING: Rotate the bootstrap password after first login. Default bootstrap credentials are admin/admin unless overridden by configuration.",
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -22,10 +22,12 @@ Overlord generates them and persists them to `data/save.json` (inside Docker:
|
|||||||
|
|
||||||
- JWT signing secret
|
- JWT signing secret
|
||||||
- Agent auth token
|
- Agent auth token
|
||||||
- Initial admin bootstrap password
|
|
||||||
|
Initial bootstrap login defaults to username `admin` and password `admin`
|
||||||
|
unless overridden with `OVERLORD_USER` / `OVERLORD_PASS`.
|
||||||
|
|
||||||
Keep `save.json` private and backed up. Use values from that file if you need
|
Keep `save.json` private and backed up. Use values from that file if you need
|
||||||
to recover bootstrap access.
|
to recover JWT or agent token values.
|
||||||
|
|
||||||
to update run
|
to update run
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user