From 8136f1965cd5a436c9f861e572c035d75f95fc07 Mon Sep 17 00:00:00 2001
From: admin <admin@192.168.1.37>
Date: Wed, 2 Sep 2026 07:54:47 +0000
Subject: [PATCH] release: sync public installer asset install.sh

---
 install.sh | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/install.sh b/install.sh
index f54c50a..15921dd 100644
--- a/install.sh
+++ b/install.sh
@@ -651,6 +651,20 @@ mkdir -p "$INSTALL_DIR" "$INSTALL_DIR"/{state,secrets,config}
 if (( ! CONTROLLER_ONLY )); then
   mkdir -p "$INSTALL_DIR"/{data/postgres,data,components,releases}
   write_controller_token
+  PG_PASSWORD_FILE="$INSTALL_DIR/secrets/xymedia-postgres-password"
+  if [[ ! -s $PG_PASSWORD_FILE ]]; then
+    umask 077
+    if (( INSTALL_EXISTING )) && [[ -s "$INSTALL_DIR/secrets/postgres-password" ]]; then
+      cp "$INSTALL_DIR/secrets/postgres-password" "$PG_PASSWORD_FILE"
+    elif [[ -n ${PG_PASSWORD_FILE_INPUT:-} ]]; then
+      cp "$PG_PASSWORD_FILE_INPUT" "$PG_PASSWORD_FILE"
+    elif command -v openssl >/dev/null; then
+      openssl rand -hex 32 >"$PG_PASSWORD_FILE"
+    else
+      od -An -N32 -tx1 /dev/urandom | tr -d ' \n' >"$PG_PASSWORD_FILE"
+    fi
+    chmod 600 "$PG_PASSWORD_FILE"
+  fi
 fi
 if (( CONTROLLER_ONLY )); then
   umask 077