jeremy
8715589cbb
- /admin: first-visit password setup (scrypt), signed 30-day session cookie, calendars add/remove/reorder/rename/color/hide, masked URLs, per-feed test, history (20) with restore; /photo-admin -> /admin#photos placeholder - settings in local /data (settings.json + auth.json + history/), seeded once from the calendar secret; dashboard + health read from settings - start.mjs drops privileges after reading secrets and runs a front proxy that stamps the real client IP; admin refuses non-LAN and proxied requests - deploy: HOBBS_DATA_DIR=/var/lib/hobbs-organizer/data, image 1.1.0 (1.0.0 kept) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01E9NnVEico3WvFxLyjy1iW3
16 lines
751 B
JavaScript
16 lines
751 B
JavaScript
// Clears the admin password so the next visit to /admin (from the LAN) can set a new one.
|
|
// Also rotates the session secret, signing out every existing admin session.
|
|
// Usage: docker exec -u 10001 hobbs-family-organizer-organizer-1 node container/reset-admin.mjs
|
|
import { randomBytes } from "node:crypto";
|
|
import { rename, writeFile } from "node:fs/promises";
|
|
|
|
const path = `${process.env.ORGANIZER_DATA_DIR || "/data"}/auth.json`;
|
|
const temporary = `${path}.reset.tmp`;
|
|
await writeFile(
|
|
temporary,
|
|
`${JSON.stringify({ passwordHash: "", sessionSecret: randomBytes(32).toString("base64url") }, null, 2)}\n`,
|
|
{ mode: 0o600 },
|
|
);
|
|
await rename(temporary, path);
|
|
console.log("Admin password cleared. Visit /admin from the LAN to set a new one.");
|