From 7218cbfd0fe693be929a60b0d64840b0de258b1d Mon Sep 17 00:00:00 2001
From: Benjamin Touchard <benjamin@kolapsis.com>
Date: Fri, 19 Dec 2025 15:19:21 +0100
Subject: [PATCH] fix: install script app password for db

---
 install/.env.example        | 4 +---
 install/compose-traefik.yml | 5 +++--
 install/compose.yml         | 5 +++--
 install/install.sh          | 7 ++++---
 4 files changed, 11 insertions(+), 10 deletions(-)

diff --git a/install/.env.example b/install/.env.example
index 2e92702..2dbb495 100644
--- a/install/.env.example
+++ b/install/.env.example
@@ -11,10 +11,8 @@ ACKIFY_ORGANISATION="Your Organization Name"
 # ==========================================
 # Database Configuration
 # ==========================================
-POSTGRES_USER=ackifyr
 POSTGRES_PASSWORD=your_secure_password
-POSTGRES_DB=ackify
-ACKIFY_DB_DSN=postgres://ackifyr:your_secure_password@ackify-db:5432/ackify?sslmode=disable
+ACKIFY_APP_PASSWORD=ackify_app_password
 
 # ==========================================
 # Security Configuration (Auto-generated)
diff --git a/install/compose-traefik.yml b/install/compose-traefik.yml
index d0c9791..5a8b0eb 100644
--- a/install/compose-traefik.yml
+++ b/install/compose-traefik.yml
@@ -6,7 +6,8 @@ services:
     image: btouchard/ackify-ce:latest
     container_name: ackify-migrate
     environment:
-      ACKIFY_DB_DSN: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@ackify-db:5432/${POSTGRES_DB}?sslmode=disable"
+      ACKIFY_DB_DSN: "postgres://postgres:${POSTGRES_PASSWORD}@ackify-db:5432/ackify?sslmode=disable"
+      ACKIFY_APP_PASSWORD: "${ACKIFY_APP_PASSWORD}"
     depends_on:
       ackify-db:
         condition: service_healthy
@@ -28,7 +29,7 @@ services:
       ACKIFY_ADMIN_EMAILS: "${ACKIFY_ADMIN_EMAILS}"
       ACKIFY_ONLY_ADMIN_CAN_CREATE: "${ACKIFY_ONLY_ADMIN_CAN_CREATE:-false}"
       ACKIFY_LISTEN_ADDR: ":8080"
-      ACKIFY_DB_DSN: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@ackify-db:5432/${POSTGRES_DB}?sslmode=disable"
+      ACKIFY_DB_DSN: "postgres://ackify_app:${ACKIFY_APP_PASSWORD}@ackify-db:5432/ackify?sslmode=disable"
       ACKIFY_OAUTH_PROVIDER: "${ACKIFY_OAUTH_PROVIDER:-}"
       ACKIFY_OAUTH_CLIENT_ID: "${ACKIFY_OAUTH_CLIENT_ID:-}"
       ACKIFY_OAUTH_CLIENT_SECRET: "${ACKIFY_OAUTH_CLIENT_SECRET:-}"
diff --git a/install/compose.yml b/install/compose.yml
index 8f10db9..43f21f3 100644
--- a/install/compose.yml
+++ b/install/compose.yml
@@ -6,7 +6,8 @@ services:
     image: btouchard/ackify-ce:latest
     container_name: ackify-migrate
     environment:
-      ACKIFY_DB_DSN: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@ackify-db:5432/${POSTGRES_DB}?sslmode=disable"
+      ACKIFY_DB_DSN: "postgres://postgres:${POSTGRES_PASSWORD}@ackify-db:5432/ackify?sslmode=disable"
+      ACKIFY_APP_PASSWORD: "${ACKIFY_APP_PASSWORD}"
     depends_on:
       ackify-db:
         condition: service_healthy
@@ -28,7 +29,7 @@ services:
       ACKIFY_ADMIN_EMAILS: "${ACKIFY_ADMIN_EMAILS}"
       ACKIFY_ONLY_ADMIN_CAN_CREATE: "${ACKIFY_ONLY_ADMIN_CAN_CREATE:-false}"
       ACKIFY_LISTEN_ADDR: ":8080"
-      ACKIFY_DB_DSN: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@ackify-db:5432/${POSTGRES_DB}?sslmode=disable"
+      ACKIFY_DB_DSN: "postgres://ackify_app:${ACKIFY_APP_PASSWORD}@ackify-db:5432/ackify?sslmode=disable"
       ACKIFY_OAUTH_PROVIDER: "${ACKIFY_OAUTH_PROVIDER:-}"
       ACKIFY_OAUTH_CLIENT_ID: "${ACKIFY_OAUTH_CLIENT_ID:-}"
       ACKIFY_OAUTH_CLIENT_SECRET: "${ACKIFY_OAUTH_CLIENT_SECRET:-}"
diff --git a/install/install.sh b/install/install.sh
index d4c139e..18eb222 100755
--- a/install/install.sh
+++ b/install/install.sh
@@ -357,6 +357,9 @@ print_success "Ed25519 private key generated"
 
 DB_PASSWORD=$(openssl rand -hex 24)
 print_success "Database password generated"
+
+DB_APP_PASSWORD=$(openssl rand -hex 24)
+print_success "App database password generated"
 echo ""
 
 # ==========================================
@@ -380,10 +383,8 @@ ACKIFY_ORGANISATION=${APP_ORGANISATION}
 # ==========================================
 # Database Configuration
 # ==========================================
-POSTGRES_USER=ackifyr
 POSTGRES_PASSWORD=${DB_PASSWORD}
-POSTGRES_DB=ackify
-ACKIFY_DB_DSN=postgres://ackifyr:${DB_PASSWORD}@postgres:5432/ackify?sslmode=disable
+ACKIFY_APP_PASSWORD=${DB_APP_PASSWORD}
 
 # ==========================================
 # Security Configuration (Auto-generated)