feat: Ability to create root user via environment variables #4847
+82
−0
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Changes
feat: Ability to set the initial root user (instance admin user) of Coolify in the
.env
file via environment variables:ROOT_USERNAME=
ROOT_USER_EMAIL=
ROOT_USER_PASSWORD=
feat: Registration is automatically disabled if you set up a root user via the
.env
filefeat: Logic, error handling and clean log output for each scenario:
Security fix: After initial installation, the Registration page is exposed with the registration form. This is usually not an issue as one installs and registers within seconds/minutes after the URL becomes publicly accessible. However, if you leave the registration page too long without registering a user, a malicious actor can potentially register and compromise your system.
-> The new way of setting your root user in the
.env
file can prevent the registration page from ever being accessible to the internet.Note
.env
file during installation, and then the user has to fill in the values in the.env
file after Coolify is already installed and then run the script again (registration page will be live for a few seconds like this). In the future, we can make the script more interactive and ask for ausername
,email
, andpassword
.Issues