Windows: generate and backfill TRITON_MANAGE_JWT_SIGNING_KEY #18

Merged

amiryahaya merged 1 commit from fix/windows-jwt-signing-key into main

2026-08-13 08:03:04 +02:00

amiryahaya commented

2026-08-13 08:02:24 +02:00

Owner

Same bug as #16, on the Windows installer this time. install.ps1 generates POSTGRES_PASSWORD, TRITON_MANAGE_WORKER_KEY, and TRITON_VAULT_KEY but never TRITON_MANAGE_JWT_SIGNING_KEY, which the manage-server binary requires to start — same crash-loop as the Linux bug fixed in #16.

compose.yaml is shared across platforms and already whitelists the variable (from #16), so only the Windows-side generation was missing.

install.ps1: generate the key alongside the other auto-generated secrets on first install
upgrade.ps1: backfill the key into .env files created before this fix, mirroring upgrade.sh

Found while working on #11/#17; unrelated to the runtime choice so split out into its own PR.

Same bug as #16, on the Windows installer this time. `install.ps1` generates `POSTGRES_PASSWORD`, `TRITON_MANAGE_WORKER_KEY`, and `TRITON_VAULT_KEY` but never `TRITON_MANAGE_JWT_SIGNING_KEY`, which the manage-server binary requires to start — same crash-loop as the Linux bug fixed in #16. `compose.yaml` is shared across platforms and already whitelists the variable (from #16), so only the Windows-side generation was missing. - `install.ps1`: generate the key alongside the other auto-generated secrets on first install - `upgrade.ps1`: backfill the key into `.env` files created before this fix, mirroring `upgrade.sh` Found while working on #11/#17; unrelated to the runtime choice so split out into its own PR.

amiryahaya added 1 commit

2026-08-13 08:02:24 +02:00

Windows: generate and backfill TRITON_MANAGE_JWT_SIGNING_KEY 5e87d3cb02

Same bug as #16 on Linux: install.ps1 generated POSTGRES_PASSWORD,
TRITON_MANAGE_WORKER_KEY, and TRITON_VAULT_KEY but never
TRITON_MANAGE_JWT_SIGNING_KEY, which the server requires to start.
compose.yaml already whitelists the var (fixed in #16, shared across
platforms) — only the Windows generation/backfill was missing.

- install.ps1: generate the key alongside the other auto-generated secrets
- upgrade.ps1: backfill the key for existing .env files that predate this fix

amiryahaya merged commit 664f1cb3fe into main

2026-08-13 08:03:04 +02:00

amiryahaya referenced this pull request from a commit

2026-08-13 08:03:04 +02:00

Merge pull request 'Windows: generate and backfill TRITON_MANAGE_JWT_SIGNING_KEY' (#18) from fix/windows-jwt-signing-key into main

amiryahaya referenced this pull request

2026-08-16 19:11:23 +02:00

fix(manage-server): upgrade.sh breaks on podman-compose (no rm subcommand) #19