From 71f5763f7bcbb774850ed54cd59b7418c01d604d Mon Sep 17 00:00:00 2001
From: florianfederspiel <florian@fedeo.de>
Date: Fri, 22 May 2026 17:07:06 +0200
Subject: [PATCH] KI-AGENT: Seafile Redis Secret URL-sicher erzeugen

---
 scripts/selfhost-setup.sh | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/scripts/selfhost-setup.sh b/scripts/selfhost-setup.sh
index f017e62..3a078f4 100755
--- a/scripts/selfhost-setup.sh
+++ b/scripts/selfhost-setup.sh
@@ -108,6 +108,14 @@ random_secret() {
   fi
 }
 
+random_urlsafe_secret() {
+  if command -v openssl >/dev/null 2>&1; then
+    openssl rand -hex 32 | tr -d '\n'
+  else
+    LC_ALL=C tr -dc 'A-Za-z0-9' </dev/urandom | head -c 64
+  fi
+}
+
 env_quote() {
   local value="$1"
   value="${value//\'/\'\\\'\'}"
@@ -445,7 +453,7 @@ main() {
   livekit_secret="$(random_secret)"
   seafile_mysql_root_password="$(random_secret)"
   seafile_mysql_password="$(random_secret)"
-  seafile_redis_password="$(random_secret)"
+  seafile_redis_password="$(random_urlsafe_secret)"
   seafile_jwt_private_key="$(random_secret)"
   seafile_admin_password="$(random_secret)"