dank/serverAppConfigs
1
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases Wiki Activity

deploy.sh: extract CADDY_BASICAUTH_HASH via grep/cut, not by sourcing .env

Browse Source 
Sourcing the .env in a set -u shell dies on the bcrypt hash's $2
expansion. grep/cut pulls the value without any shell interpretation.
This commit is contained in:
Frank
2026-08-22 02:51:13 -07:00
parent 4572a7739d
commit 5caa2178c3
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/deploy.sh
+4 -2
View File
@@ -124,8 +124,10 @@ if [ '${COPY_SHARED[$TARGET]}' = '1' ]; then
cp shared/alloy/config.alloy /opt/alloy/config/config.alloy
echo ' Rendering Caddyfile (basicauth hash from .env)...'
set -a; . ./.env; set +a
if [ -z \"\${CADDY_BASICAUTH_HASH:-}\" ]; then
# Extract the hash with grep/cut rather than sourcing .env: sourcing a
# bcrypt value in a set -u shell dies on its dollar-sign expansion.
CADDY_BASICAUTH_HASH=\"\$(grep -E '^CADDY_BASICAUTH_HASH=' .env | tail -1 | cut -d= -f2-)\"
if [ -z \"\${CADDY_BASICAUTH_HASH}\" ]; then
echo ' WARN: CADDY_BASICAUTH_HASH not set in .env; keeping placeholder'
else
# '|' delimiter: the bcrypt hash contains '/' characters.