From 5078f4af9266922b5b39db4216578b1023e3bb31 Mon Sep 17 00:00:00 2001 From: Pouzor Date: Mon, 9 Mar 2026 11:53:37 +0100 Subject: [PATCH] fix: quote AUTH_PASSWORD_HASH in .env.example to prevent Docker dollar-sign interpolation Bcrypt hashes contain $ chars that Docker Compose interpolates as variables. Single-quoting the value prevents interpolation in both Docker Compose and python-dotenv. --- .env.example | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.env.example b/.env.example index 2d30a43..767cdca 100644 --- a/.env.example +++ b/.env.example @@ -6,8 +6,9 @@ CORS_ORIGINS=["http://localhost:5173","http://localhost:3000"] # Auth — default credentials: admin / admin # ⚠️ Change before exposing on a network. # Generate a new hash: python3 -c "from passlib.context import CryptContext; print(CryptContext(schemes=['bcrypt']).hash('yourpassword'))" +# ⚠️ Keep the single quotes around the hash — bcrypt hashes contain \$ which Docker misinterprets without them. AUTH_USERNAME=admin -AUTH_PASSWORD_HASH=$2b$12$RtMbyw17l4N5UGzeXMNAWuzCaVV.XFBY7ZetWheQhxcBDcxahapkG +AUTH_PASSWORD_HASH='$2b$12$RtMbyw17l4N5UGzeXMNAWuzCaVV.XFBY7ZetWheQhxcBDcxahapkG' # Scanner — JSON array of CIDR ranges to scan SCANNER_RANGES=["192.168.1.0/24"]