basnijholt/compose-farm v1.26.0

on GitHub

Features

• cf config init-env generates the web UI login. The generated .env now contains a random CF_WEB_PASSWORD (user admin), and the command prints the login once. Before, it wrote a commented-out placeholder, so a Docker setup that skipped the extra manual step answered every request through the reverse proxy with 403.
  • Re-running with --force keeps an existing password (read the way Docker Compose reads it: export, quotes, comments), so saved logins keep working; a kept password is not printed.
  • .env is now written with 0600 permissions, since it holds a credential.
  • A warning appears when CF_WEB_USERNAME or CF_WEB_PASSWORD is set in your shell, because Docker Compose then uses that value instead of .env.

Improvements

• Clearer 403 for remote access without a password. The message now also names CF_WEB_NO_AUTH=1 and explains that older docker-compose.yml files don't pass these variables to the container (CF_WEB_PASSWORD needs v1.22.0 or later, CF_WEB_NO_AUTH v1.22.1 or later). This is what locks out existing Docker users after an image update.
• Docs: the Docker Quick Start no longer needs a manual openssl rand step and has an upgrade note; the README's Docker section and the configuration reference mention the generated login.

Full changelog: v1.25.0...v1.26.0