From f1e0f36ccaa70195683a345692e63e371fe405e6 Mon Sep 17 00:00:00 2001
From: florianfederspiel <florian@fedeo.de>
Date: Wed, 3 Jun 2026 10:09:43 +0200
Subject: [PATCH] KI-AGENT: Datenbank-URL im Selfhost-Setup absichern

---
 docker-compose.selfhost.yml | 2 +-
 scripts/selfhost-setup.sh   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docker-compose.selfhost.yml b/docker-compose.selfhost.yml
index 4e292a4..e7243a8 100644
--- a/docker-compose.selfhost.yml
+++ b/docker-compose.selfhost.yml
@@ -99,7 +99,7 @@ services:
       COOKIE_SECRET: ${COOKIE_SECRET}
       JWT_SECRET: ${JWT_SECRET}
       ENCRYPTION_KEY: ${ENCRYPTION_KEY}
-      DATABASE_URL: ${DATABASE_URL}
+      DATABASE_URL: ${DATABASE_URL:-postgres://${DB_USER}:${DB_PASSWORD}@db:5432/${DB_NAME}}
       MAILER_SMTP_HOST: ${MAILER_SMTP_HOST}
       MAILER_SMTP_PORT: ${MAILER_SMTP_PORT}
       MAILER_SMTP_SSL: ${MAILER_SMTP_SSL}
diff --git a/scripts/selfhost-setup.sh b/scripts/selfhost-setup.sh
index b50cce1..ecf8efc 100755
--- a/scripts/selfhost-setup.sh
+++ b/scripts/selfhost-setup.sh
@@ -506,7 +506,7 @@ main() {
   echo "Secrets werden automatisch erzeugt."
   local db_password minio_password cookie_secret jwt_secret encryption_key m2m_key
   local matrix_db_password matrix_turn_secret matrix_registration_secret livekit_secret
-  db_password="$(random_secret)"
+  db_password="$(random_hex_secret)"
   minio_password="$(random_secret)"
   cookie_secret="$(random_secret)"
   jwt_secret="$(random_secret)"