From b27b8d380d842276192225448c2d6635a9020cf1 Mon Sep 17 00:00:00 2001
From: kelin <kelinfoxy@gmail.com>
Date: Tue, 10 Feb 2026 14:13:17 -0500
Subject: [PATCH] Make Authelia secret generation consistent with Arcane

- Add placeholder string checks to AUTHELIA_JWT_SECRET, AUTHELIA_SESSION_SECRET, and AUTHELIA_STORAGE_ENCRYPTION_KEY
- Now generates secrets even when placeholder 'generate-with-openssl-rand-hex-64' is loaded from .env
- Ensures consistent behavior across all auto-generated secrets
---
 scripts/ez-homelab.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/scripts/ez-homelab.sh b/scripts/ez-homelab.sh
index 3396053..6bf2a11 100755
--- a/scripts/ez-homelab.sh
+++ b/scripts/ez-homelab.sh
@@ -811,13 +811,13 @@ save_env_file() {
             fi
         fi
 
-        if [ -z "$AUTHELIA_JWT_SECRET" ]; then
+        if [ -z "$AUTHELIA_JWT_SECRET" ] || [ "$AUTHELIA_JWT_SECRET" = "generate-with-openssl-rand-hex-64" ]; then
             AUTHELIA_JWT_SECRET=$(openssl rand -hex 64)
         fi
-        if [ -z "$AUTHELIA_SESSION_SECRET" ]; then
+        if [ -z "$AUTHELIA_SESSION_SECRET" ] || [ "$AUTHELIA_SESSION_SECRET" = "generate-with-openssl-rand-hex-64" ]; then
             AUTHELIA_SESSION_SECRET=$(openssl rand -hex 64)
         fi
-        if [ -z "$AUTHELIA_STORAGE_ENCRYPTION_KEY" ]; then
+        if [ -z "$AUTHELIA_STORAGE_ENCRYPTION_KEY" ] || [ "$AUTHELIA_STORAGE_ENCRYPTION_KEY" = "generate-with-openssl-rand-hex-64" ]; then
             AUTHELIA_STORAGE_ENCRYPTION_KEY=$(openssl rand -hex 64)
         fi