Terraform gains enable_seed_password + seed_admin_password (sensitive) vars on the customer-instance module; when enabled the password is piped via startup-script into /opt/agnes/.env as SEED_ADMIN_PASSWORD. On first boot app/main.py argon2-hashes it onto the seed user so the admin can log in immediately without going through /auth/bootstrap. Never overwrites an existing password_hash — safe against accidental reset on terraform apply. |
||
|---|---|---|
| .. | ||
| .env.template | ||
| __init__.py | ||
| claude_md_template.txt | ||
| deploy.staging.yml | ||
| deploy.yml | ||
| instance.yaml.example | ||
| loader.py | ||