From 05cb21696845be5cdc5fb1408026a711b22a492e Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Sun, 19 Jul 2026 00:42:29 +0200 Subject: [PATCH] papra: add required AUTH_SECRET (app refuses to boot without it) papra was NOT version-bumped by this campaign -- it crash-looped at its existing 26.6.1-rootless pin, so this is a PRE-EXISTING catalog defect: papra has never been deployable from this template. Invalid configuration: In production, the auth secret must not be the default one. Please set a secure auth secret using the AUTH_SECRET environment variable. Added as a generated hex:32 secret and marked data_key: true -- it signs sessions, so regenerating it on restore would invalidate every login. Campaign 7 catalog sweep. Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_01Nn3VgQk9iwEGgyx6QJ2NvE --- templates/papra/.felhom.yml | 11 +++++++++++ templates/papra/docker-compose.yml | 1 + 2 files changed, 12 insertions(+) diff --git a/templates/papra/.felhom.yml b/templates/papra/.felhom.yml index 60d4ff1..153f2d5 100644 --- a/templates/papra/.felhom.yml +++ b/templates/papra/.felhom.yml @@ -30,6 +30,17 @@ deploy_fields: default: "papra" required: true locked_after_deploy: true + + - env_var: AUTH_SECRET + label: "Munkamenet-aláíró kulcs" + type: secret + generate: "hex:32" + locked_after_deploy: true + # A Papra éles módban ELUTASÍTJA az indulást, ha ez az alapértelmezett érték + # marad ("the auth secret must not be the default one"), ezért kötelező. + # Ez írja alá a munkameneteket: ha újragenerálódik, minden bejelentkezés + # érvénytelenné válik, ezért visszaállításkor a régi kulcsot kell megtartani. + data_key: true description: "Az alkalmazás aldomainje" # --- App info (info page content) --- diff --git a/templates/papra/docker-compose.yml b/templates/papra/docker-compose.yml index 99623b1..adbf9b7 100644 --- a/templates/papra/docker-compose.yml +++ b/templates/papra/docker-compose.yml @@ -14,6 +14,7 @@ services: environment: - TZ=Europe/Budapest - APP_BASE_URL=https://${SUBDOMAIN}.${DOMAIN} + - AUTH_SECRET=${AUTH_SECRET} volumes: - papra_data:/app/data networks: