xpltdco/media-rip
1
0
Fork 0
mirror of https://github.com/xpltdco/media-rip.git synced 2026-04-03 02:53:58 -06:00
Code Issues Projects Releases Packages Wiki Activity Actions

Remove PASSWORD_HASH from user-facing config — plaintext PASSWORD only

Browse source 
password_hash remains as an internal field (used by auth system and DB),
but is no longer documented or advertised as a config option.
This commit is contained in:
xpltd 2026-03-21 22:42:05 -05:00
parent 2bb97a0b30
commit de09e51b11
2 changed files with 3 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
README.md
View file

@ -76,8 +76,7 @@ These are the knobs most operators actually touch — all shown commented out in
|----------|---------|-------------| |----------|---------|-------------|
| `MEDIARIP__ADMIN__ENABLED` | `true` | Enable admin panel | | `MEDIARIP__ADMIN__ENABLED` | `true` | Enable admin panel |
| `MEDIARIP__ADMIN__USERNAME` | `admin` | Admin username | | `MEDIARIP__ADMIN__USERNAME` | `admin` | Admin username |
| `MEDIARIP__ADMIN__PASSWORD` | _(empty)_ | Admin password (plaintext — hashed on startup, never stored) | | `MEDIARIP__ADMIN__PASSWORD` | _(empty)_ | Admin password (hashed on startup, never stored as plaintext) |
| `MEDIARIP__ADMIN__PASSWORD_HASH` | _(empty)_ | Bcrypt hash (alternative to plaintext — for advanced users) |
#### Purge #### Purge
@ -169,7 +168,7 @@ For production with TLS, use the included Caddy reverse proxy:
```bash ```bash
cp docker-compose.example.yml docker-compose.yml cp docker-compose.example.yml docker-compose.yml
cp .env.example .env cp .env.example .env
# Edit .env with your domain and admin password hash # Edit .env with your domain and admin password
docker compose up -d docker compose up -d
``` ```

2
backend/app/core/config.py
View file

@ -98,7 +98,7 @@ class AdminConfig(BaseModel):
enabled: bool = True enabled: bool = True
username: str = "admin" username: str = "admin"
password: str = "" # Plaintext — hashed on startup, never stored password: str = "" # Plaintext — hashed on startup, never stored
password_hash: str = "" # Bcrypt hash — set directly or derived from password password_hash: str = "" # Internal — set by app on startup or first-run wizard
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------