From ec98a83b48e126f04dc2abc8b409b17803f93600 Mon Sep 17 00:00:00 2001 From: librelad Date: Tue, 18 Aug 2026 20:51:31 +0100 Subject: [PATCH] fix(gitea,invidious): stop two secrets sharing one placeholder index MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Both configs defined a second secret in a later section starting the numbering over, so CFG_GITEA_METRICS_TOKEN_1 and CFG_GITEA_ADMIN_PASSWORD_1 both read RANDOMIZEDPASSWORD1 — and the replacer generates one value per distinct placeholder and seds every occurrence, so the two came out identical. Same for Invidious's HMAC key and admin password. Predates the slot rename. Currently latent, since neither admin password is consumed by anything, but it would silently pair a live secret with whatever gets wired to the other key. Co-Authored-By: Claude Opus 5 --- containers/gitea/gitea.config | 2 +- containers/invidious/invidious.config | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/containers/gitea/gitea.config b/containers/gitea/gitea.config index 8f4756f..c31e3dc 100755 --- a/containers/gitea/gitea.config +++ b/containers/gitea/gitea.config @@ -71,4 +71,4 @@ CFG_GITEA_PORT_2="gitea-service|ssh|random:22|private|tcp|false|false|false|Git CFG_GITEA_AUTH_PROFILE=multi_user CFG_GITEA_ADMIN_USER= CFG_GITEA_ADMIN_EMAIL= -CFG_GITEA_ADMIN_PASSWORD_1=RANDOMIZEDPASSWORD1 +CFG_GITEA_ADMIN_PASSWORD_1=RANDOMIZEDPASSWORD2 diff --git a/containers/invidious/invidious.config b/containers/invidious/invidious.config index 9f3448b..ec1ac9a 100755 --- a/containers/invidious/invidious.config +++ b/containers/invidious/invidious.config @@ -69,4 +69,4 @@ CFG_INVIDIOUS_PORT_1="invidious-service|webui|random:3000|public|tcp|false|true| CFG_INVIDIOUS_AUTH_PROFILE=multi_user CFG_INVIDIOUS_ADMIN_USER= CFG_INVIDIOUS_ADMIN_EMAIL= -CFG_INVIDIOUS_ADMIN_PASSWORD_1=RANDOMIZEDPASSWORD1 +CFG_INVIDIOUS_ADMIN_PASSWORD_1=RANDOMIZEDPASSWORD2