Generate a session secret instead of refusing to start
Build and Push Docker Image / build-and-push (push) Failing after 20s

setup.sh starts the production server without SESSION_SECRET, so the new
"refuse to start" check stopped the app after an update. When the variable
is unset in production the server now makes a random secret once and keeps
it in DATA_DIR/.session-secret (mode 600, git-ignored).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
nmemmertandClaude Sonnet 5.5 committed 2026-10-06 08:18:02 -04:00
1 parent f274bc9c8a
commit 31fb3f958d
3 files changed
+24 -7

No files matched your search

+2
View File
@@ -11,3 +11,5 @@ coverage/
.api.log
.DS_Store
.env
.session-secret
server/data/backups/