release: sync public installer asset install.sh

2026-09-02 07:54:47 +00:00
parent 484bc73e1f
commit 8136f1965c
1 changed files with 14 additions and 0 deletions
@@ -651,6 +651,20 @@ mkdir -p "$INSTALL_DIR" "$INSTALL_DIR"/{state,secrets,config}
 if (( ! CONTROLLER_ONLY )); then
  mkdir -p "$INSTALL_DIR"/{data/postgres,data,components,releases}
  write_controller_token
+  PG_PASSWORD_FILE="$INSTALL_DIR/secrets/xymedia-postgres-password"
+  if [[ ! -s $PG_PASSWORD_FILE ]]; then
+    umask 077
+    if (( INSTALL_EXISTING )) && [[ -s "$INSTALL_DIR/secrets/postgres-password" ]]; then
+      cp "$INSTALL_DIR/secrets/postgres-password" "$PG_PASSWORD_FILE"
+    elif [[ -n ${PG_PASSWORD_FILE_INPUT:-} ]]; then
+      cp "$PG_PASSWORD_FILE_INPUT" "$PG_PASSWORD_FILE"
+    elif command -v openssl >/dev/null; then
+      openssl rand -hex 32 >"$PG_PASSWORD_FILE"
+    else
+      od -An -N32 -tx1 /dev/urandom | tr -d ' \n' >"$PG_PASSWORD_FILE"
+    fi
+    chmod 600 "$PG_PASSWORD_FILE"
+  fi
 fi
 if (( CONTROLLER_ONLY )); then
  umask 077