Fix manage-server crash-loop: generate and pass through TRITON_MANAGE_JWT_SIGNING_KEY #16

Merged

amiryahaya merged 1 commit from fix/jwt-signing-key-generation into main

2026-08-13 07:53:08 +02:00

amiryahaya commented

2026-08-13 07:10:08 +02:00

Owner

Fixes #15

Fresh installs crash-loop because the server requires TRITON_MANAGE_JWT_SIGNING_KEY but nothing ever generated it, and even setting it by hand in .env didn't help since compose.yaml didn't forward it into the container.

install.sh: generate the key alongside TRITON_VAULT_KEY/TRITON_MANAGE_WORKER_KEY on first install
env.template: add the placeholder
compose.yaml: add the var to manage-server's environment whitelist so it actually reaches the container
upgrade.sh: backfill the key for existing .env files that predate this fix

Verified live on a fresh Ubuntu 24.04 VPS install (--no-tls behind Caddy) — container now starts healthy and /api/v1/health returns 200.

Fixes #15 Fresh installs crash-loop because the server requires `TRITON_MANAGE_JWT_SIGNING_KEY` but nothing ever generated it, and even setting it by hand in `.env` didn't help since `compose.yaml` didn't forward it into the container. - `install.sh`: generate the key alongside `TRITON_VAULT_KEY`/`TRITON_MANAGE_WORKER_KEY` on first install - `env.template`: add the placeholder - `compose.yaml`: add the var to `manage-server`'s environment whitelist so it actually reaches the container - `upgrade.sh`: backfill the key for existing `.env` files that predate this fix Verified live on a fresh Ubuntu 24.04 VPS install (`--no-tls` behind Caddy) — container now starts healthy and `/api/v1/health` returns 200.

amiryahaya added 1 commit

2026-08-13 07:10:08 +02:00

Fix manage-server crash-loop: generate and pass through TRITON_MANAGE_JWT_SIGNING_KEY b92764f348

install.sh generated TRITON_VAULT_KEY and TRITON_MANAGE_WORKER_KEY but never
TRITON_MANAGE_JWT_SIGNING_KEY, which the server requires to start. Even when
set manually, compose.yaml didn't forward it into the container since its
environment block explicitly whitelists every passed-through variable.

- install.sh: generate the key alongside the other auto-generated secrets
- env.template: add the placeholder so first-run install.sh can fill it
- compose.yaml: add the var to manage-server's environment whitelist
- upgrade.sh: backfill the key into .env files from before this fix

Fixes #15

amiryahaya merged commit eb594c44a7 into main

2026-08-13 07:53:08 +02:00

amiryahaya referenced this pull request from a commit

2026-08-13 07:53:10 +02:00

Merge pull request 'Fix manage-server crash-loop: generate and pass through TRITON_MANAGE_JWT_SIGNING_KEY' (#16) from fix/jwt-signing-key-generation into main

amiryahaya referenced this pull request

2026-08-13 08:01:37 +02:00

Windows: auto-install Docker Desktop instead of Podman #17

amiryahaya referenced this pull request from a commit

2026-08-13 08:02:20 +02:00

Windows: generate and backfill TRITON_MANAGE_JWT_SIGNING_KEY

amiryahaya referenced this pull request