kelin/EZ-Homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix password hash corruption in users_database.yml

Browse Source 
Issue: Heredoc variable expansion was mangling password hashes containing $ characters
Solution: Use quoted heredoc ('EOF') with placeholders, then sed replace

The unquoted heredoc was interpreting $ in the argon2 hash as shell variable
expansion, corrupting the hash format.
This commit is contained in:
kelin
2026-01-13 20:06:43 -05:00
parent 8b5ba494dd
commit ee8a359542
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
scripts/deploy-homelab.sh
View File

@@ -187,20 +187,25 @@ if [ -f /tmp/authelia_admin_credentials.tmp ]; then
log_success "Using credentials: $ADMIN_USER ($ADMIN_EMAIL)" log_success "Using credentials: $ADMIN_USER ($ADMIN_EMAIL)"
# Create users_database.yml with credentials from setup # Create users_database.yml with credentials from setup
cat > /opt/stacks/core/authelia/users_database.yml << EOF # Use single quotes in heredoc to prevent variable expansion issues with $ in hash
cat > /opt/stacks/core/authelia/users_database.yml << 'EOF'
############################################################### ###############################################################
# Users Database # # Users Database #
############################################################### ###############################################################
users: users:
${ADMIN_USER}: ADMIN_USER_PLACEHOLDER:
displayname: "Admin User" displayname: "Admin User"
password: "${PASSWORD_HASH}" password: "PASSWORD_HASH_PLACEHOLDER"
email: ${ADMIN_EMAIL} email: ADMIN_EMAIL_PLACEHOLDER
groups: groups:
- admins - admins
- users - users
EOF EOF
# Now safely replace placeholders
sed -i "s/ADMIN_USER_PLACEHOLDER/${ADMIN_USER}/g" /opt/stacks/core/authelia/users_database.yml
sed -i "s|PASSWORD_HASH_PLACEHOLDER|${PASSWORD_HASH}|g" /opt/stacks/core/authelia/users_database.yml
sed -i "s/ADMIN_EMAIL_PLACEHOLDER/${ADMIN_EMAIL}/g" /opt/stacks/core/authelia/users_database.yml
log_success "Authelia admin user configured from setup script" log_success "Authelia admin user configured from setup script"
echo "" echo ""