always generate pepper salt
This commit is contained in:
2
start.sh
2
start.sh
@@ -37,10 +37,10 @@ if [[ ! -f /app/data/configs/homeserver.yaml ]]; then
|
|||||||
|
|
||||||
if [[ -z "${CLOUDRON_OIDC_ISSUER:-}" ]]; then
|
if [[ -z "${CLOUDRON_OIDC_ISSUER:-}" ]]; then
|
||||||
yq eval -i ".enable_registration=true" /app/data/configs/homeserver.yaml
|
yq eval -i ".enable_registration=true" /app/data/configs/homeserver.yaml
|
||||||
yq eval -i ".password_config.pepper=\"$(pwgen -1s 12)\"" /app/data/configs/homeserver.yaml
|
|
||||||
# just setting enabled to false is not enough. see https://github.com/matrix-org/matrix-synapse-ldap3/issues/123
|
# just setting enabled to false is not enough. see https://github.com/matrix-org/matrix-synapse-ldap3/issues/123
|
||||||
yq eval -i "del(.password_providers)" /app/data/configs/homeserver.yaml
|
yq eval -i "del(.password_providers)" /app/data/configs/homeserver.yaml
|
||||||
fi
|
fi
|
||||||
|
yq eval -i ".password_config.pepper=\"$(pwgen -1s 12)\"" /app/data/configs/homeserver.yaml # always set this so that users can enable password login if needed
|
||||||
fi
|
fi
|
||||||
|
|
||||||
echo "==> Ensure we log to console"
|
echo "==> Ensure we log to console"
|
||||||
|
|||||||
Reference in New Issue
Block a user