5835fa09d7
Answers "should we stop creating an admin/pass on start" with the split the catalog actually has, rather than one way for everything. Ten apps need it: adguard, authelia, bookstack, matrix, nextcloud, owncloud, pihole, rocketchat, stalwart, speedtest and headscale either pass the generated password into the container or hand it to an install hook that creates the account. There the password IS the working credential — dropping it would lock you out. Left alone. Three do not create an account at all: gitea, invidious and mattermost seed no user (the first one comes from their own signup flow or the Create Account tool), so the password minted at install named nothing. The WebUI credentials card showed a password that could not log in. They now match linkding — an empty, unslotted ADMIN_PASSWORD the auth adapter fills when the operator makes the first admin, and keeps in step on later resets. Unslotted because the slot number marks a value the installer generates. mattermost's adapter also had linkding's bug: it persists ADMIN_PASSWORD but the config declared only ADMIN_EMAIL, so the write was a no-op. WebUI: rocketchat's generated admin password had no field mapping, so the card could not show it. Added, plus a generic ADMIN_USER entry — six apps record an admin username the card had no way to display. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
81 lines
4.1 KiB
Plaintext
Executable File
81 lines
4.1 KiB
Plaintext
Executable File
#
|
|
# =============================================================================
|
|
# GENERAL CONFIGURATION
|
|
# =============================================================================
|
|
# APP_NAME = name of application for use in scripts
|
|
# COMPOSE_FILE = default for no app_name in docker-compose file name, app if there is
|
|
# BACKUP = if true, include this application in backup operations
|
|
# UPDATE_TYPE = auto: new image builds are applied automatically (a recovery snapshot is taken first), manual: only when you press Update
|
|
# HEALTHCHECK = if true, default docker health checks for that container will be enabled
|
|
# AUTHELIA = if true, use Authelia authentication, if false turned off.
|
|
# HEADSCALE = options : false, local, remote (see general config). e.g false or local,remote
|
|
#
|
|
CFG_INVIDIOUS_APP_NAME=invidious
|
|
CFG_INVIDIOUS_BACKUP=false
|
|
CFG_INVIDIOUS_BACKUP_STRATEGY=auto
|
|
CFG_INVIDIOUS_UPDATE_TYPE=auto
|
|
CFG_INVIDIOUS_COMPOSE_FILE=default
|
|
CFG_INVIDIOUS_HEALTHCHECK=false
|
|
CFG_INVIDIOUS_AUTHELIA=false
|
|
CFG_INVIDIOUS_HEADSCALE=false
|
|
# HMAC_KEY = signs Invidious tokens/links; auto-generated, fed to the compose
|
|
# via the INVIDIOUS_HMAC_KEY_1_TAG tag (preserved across reinstalls)
|
|
CFG_INVIDIOUS_HMAC_KEY_1=RANDOMIZEDPASSWORD1
|
|
#
|
|
# =============================================================================
|
|
# METADATA
|
|
# =============================================================================
|
|
# CATEGORY = application category for grouping
|
|
# TITLE = display name for the application
|
|
# DESCRIPTION = short description of the application
|
|
# LONG_DESCRIPTION = detailed description of the application
|
|
# URL = source repository or documentation URL
|
|
# ACTIONS = available actions for this application
|
|
#
|
|
CFG_INVIDIOUS_CATEGORY="media"
|
|
CFG_INVIDIOUS_TITLE="Invidious"
|
|
CFG_INVIDIOUS_DESCRIPTION="YouTube Frontend"
|
|
CFG_INVIDIOUS_LONG_DESCRIPTION="Invidious is an alternative front-end to YouTube that focuses on privacy and providing a distraction-free viewing experience"
|
|
CFG_INVIDIOUS_URL="https://github.com/iv-org/invidious"
|
|
CFG_INVIDIOUS_ACTIONS="configure|install|restart|shutdown|uninstall|tools"
|
|
#
|
|
# =============================================================================
|
|
# NETWORK CONFIGURATION
|
|
# =============================================================================
|
|
# DOMAIN = number of domain from the general config, useful when using multiple domains
|
|
# WHITELIST = if true only allow whitelisted ips (see general config), if false allow all
|
|
#
|
|
CFG_INVIDIOUS_DOMAIN=1
|
|
CFG_INVIDIOUS_WHITELIST=false
|
|
CFG_INVIDIOUS_NETWORK=default
|
|
#
|
|
# =============================================================================
|
|
# PORT CONFIGURATION
|
|
# =============================================================================
|
|
# PORT_ = port configuration: app|name|external:internal|access|protocol|login|traefik|webui|description
|
|
# - app: application name
|
|
# - name: service identifier (webui, dns, ssh, etc.)
|
|
# - external:internal: port mapping (external can be 'random' for auto-allocation)
|
|
# - access: 'public' (internet accessible), 'private' (local network only), 'disabled' (not running)
|
|
# - protocol: 'tcp' or 'udp'
|
|
# - login: if true, this port requires basic-auth via Traefik (only meaningful when traefik=true)
|
|
# - traefik: if true, Traefik handles this port (reverse proxy)
|
|
# - webui: if true, this port serves the main web interface
|
|
# - description: human-readable description of the service
|
|
#
|
|
CFG_INVIDIOUS_PORT_1="invidious-service|webui|random:3000|public|tcp|false|true|true|Web Interface||invidious"
|
|
|
|
# AUTH_PROFILE = capability tier for the WebUI auth tools (single_password | user_password | multi_user)
|
|
CFG_INVIDIOUS_AUTH_PROFILE=multi_user
|
|
CFG_INVIDIOUS_ADMIN_USER=
|
|
CFG_INVIDIOUS_ADMIN_EMAIL=
|
|
#
|
|
# Recorded by the auth tools, not by the installer. Invidious seeds no account at
|
|
# install — the first admin is created from the WebUI (Create Account), and the
|
|
# adapter writes the username and password here so the credentials card can show
|
|
# them. Deliberately empty and unslotted: a generated password would name an
|
|
# account that does not exist, and the slot number marks a value the installer
|
|
# generates.
|
|
#
|
|
CFG_INVIDIOUS_ADMIN_PASSWORD=
|