From 0aaae01833c0daafed2607a5648ba1a5211a1ff6 Mon Sep 17 00:00:00 2001 From: librelad Date: Fri, 28 Aug 2026 12:40:03 +0100 Subject: [PATCH] webui: create the secret drop at install, not by hand MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit libreportal-ownership gained secret-dir, and nothing called it. I made the directory by hand while building the channel, which hid that a fresh install would not have one — /api/setup/secret answers 503 without it, so a remote backup destination could not be added at all. Created alongside webui-bind, which is its mirror and needs root for the same reason: ownership only root can set, in place before anyone types a password into the wizard. Co-Authored-By: Claude Opus 5 --- scripts/function/permission/libreportal_folders.sh | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/scripts/function/permission/libreportal_folders.sh b/scripts/function/permission/libreportal_folders.sh index 6676c77..d578491 100755 --- a/scripts/function/permission/libreportal_folders.sh +++ b/scripts/function/permission/libreportal_folders.sh @@ -83,6 +83,12 @@ reconcileWebuiDirOwnership() fi runOwnership webui runOwnership webui-bind + # The drop the WebUI hands secrets through, created here for the same reason + # webui-bind is: it needs ownership only root can set, and it has to exist + # before the first time someone types a password into the wizard. Without + # it /api/setup/secret answers 503 and a remote backup destination cannot be + # added at all. + runOwnership secret-dir isSuccessful "Reconciled WebUI dir ($webui_dir)" }