generate-passwords.sh

#!/bin/bash

# ========================================
# SteerDock Password Generator
# Generates secure passwords for all services
# ========================================

echo ""
echo "SteerDock Password Generator"
echo "================================="
echo ""

# Function to generate secure password
generate_password() {
    local length=${1:-32}
    # Character set: a-z, A-Z, 0-9 (no special chars to avoid escaping issues)
    tr -dc 'a-zA-Z0-9' < /dev/urandom | head -c $length
}

# Generate all passwords
SQL_TYPE="mysql"
POSTGRES_USER="steerdock"
POSTGRES_PASSWORD=$(generate_password 32)
POSTGRES_DB="steerdock"
MYSQL_USER="steerdock"
MYSQL_PASSWORD=$(generate_password 32)
MYSQL_ROOT_PASSWORD=$(generate_password 32)
MYSQL_DATABASE="steerdock"
MONGO_INITDB_ROOT_USERNAME="steerdock"
MONGO_INITDB_ROOT_PASSWORD=$(generate_password 32)
MONGO_INITDB_DATABASE="steerdock"
REDIS_PASSWORD=$(generate_password 32)
JWT_SECRET=$(generate_password 64)
ENCRYPTION_KEY=$(generate_password 64)
ALLOWED_ORIGINS="http://localhost:8383,http://localhost:5151,http://192.168.100.100:8383,http://192.168.100.100:5151,http://172.0.0.0:8383,http://172.0.0.0:5151"
FRONTEND_PORT="5151"
BASE_URL="http://localhost:8383"

echo "Generating secure passwords..."
echo ""

# ========================================
# Create .env file
# ========================================
echo "Creating .env file..."

cat > .env << EOF
# ========================================
# SteerDock Environment Configuration
# Auto-generated by generate-passwords.sh
# ========================================

# Frontend Configuration
# ========================================
FRONTEND_PORT=$FRONTEND_PORT
BASE_URL=$BASE_URL

# Database Configuration
# ========================================
SQL_TYPE=$SQL_TYPE
# For standalone binary (connects to Docker containers)
DATABASE_HOST=localhost
DATABASE_PORT=3306
DATABASE_URL=mysql://steerdock:$MYSQL_PASSWORD@localhost:3306/steerdock
# For Docker Compose (internal network)
# DATABASE_HOST=mysql
# DATABASE_URL=mysql://steerdock:$MYSQL_PASSWORD@mysql:3306/steerdock

# ========================================
# PostgreSQL Database
# ========================================
# For standalone binary (connects to Docker containers)
POSTGRES_HOST=localhost
POSTGRES_PORT=5432
POSTGRES_USER=$POSTGRES_USER
POSTGRES_PASSWORD=$POSTGRES_PASSWORD
POSTGRES_DB=$POSTGRES_DB
POSTGRES_URL=postgres://steerdock:$POSTGRES_PASSWORD@localhost:5432/steerdock
# For Docker Compose (internal network)
# POSTGRES_HOST=postgres
# POSTGRES_URL=postgres://steerdock:$POSTGRES_PASSWORD@postgres:5432/steerdock

# ========================================
# MySQL Database
# ========================================
# For standalone binary (connects to Docker containers)
MYSQL_HOST=localhost
MYSQL_PORT=3306
MYSQL_USER=$MYSQL_USER
MYSQL_PASSWORD=$MYSQL_PASSWORD
MYSQL_ROOT_PASSWORD=$MYSQL_ROOT_PASSWORD
MYSQL_DATABASE=$MYSQL_DATABASE
MYSQL_URL=mysql://steerdock:$MYSQL_PASSWORD@localhost:3306/steerdock
# For Docker Compose (internal network)
# MYSQL_HOST=mysql
# MYSQL_URL=mysql://steerdock:$MYSQL_PASSWORD@mysql:3306/steerdock

# ========================================
# MongoDB Database
# ========================================
MONGO_HOST=localhost
MONGO_PORT=27017
MONGO_INITDB_ROOT_USERNAME=$MONGO_INITDB_ROOT_USERNAME
MONGO_INITDB_ROOT_PASSWORD=$MONGO_INITDB_ROOT_PASSWORD
MONGO_INITDB_DATABASE=$MONGO_INITDB_DATABASE
MONGO_URL=mongodb://steerdock:$MONGO_INITDB_ROOT_PASSWORD@localhost:27017/steerdock

# ========================================
# Redis Cache
# ========================================
# For standalone binary (connects to Docker containers)
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=$REDIS_PASSWORD
REDIS_URL=redis://:$REDIS_PASSWORD@localhost:6379/0
# For Docker Compose (internal network)
# REDIS_HOST=redis
# REDIS_URL=redis://:$REDIS_PASSWORD@redis:6379/0

# ========================================
# Security
# ========================================
JWT_SECRET=$JWT_SECRET
ENCRYPTION_KEY=$ENCRYPTION_KEY
ALLOWED_ORIGINS=$ALLOWED_ORIGINS

# ========================================
# AI Configuration (optional)
# ========================================
# Supported providers: mock, deepseek, zhipu, openai, ollama
AI_PROVIDER=mock
AI_API_KEY=
AI_API_URL=
AI_MODEL=
AI_ENABLED=false

# Example configurations for different AI providers:
# DeepSeek: AI_PROVIDER=deepseek, AI_API_KEY=sk-xxx, AI_API_URL=https://api.deepseek.com/v1/chat/completions, AI_MODEL=deepseek-chat
# OpenAI: AI_PROVIDER=openai, AI_API_KEY=sk-xxx, AI_API_URL=https://api.openai.com/v1/chat/completions, AI_MODEL=gpt-3.5-turbo
# Zhipu: AI_PROVIDER=zhipu, AI_API_KEY=xxx, AI_API_URL=https://open.bigmodel.cn/api/paas/v4/chat/completions, AI_MODEL=glm-4
# Ollama: AI_PROVIDER=ollama, AI_API_URL=http://localhost:11434/api/generate, AI_MODEL=llama2

# ========================================
# OAuth Configuration (optional)
# ========================================
# Google OAuth
GOOGLE_CLIENT_ID=your_google_client_id_here
GOOGLE_CLIENT_SECRET=your_google_client_secret_here

# GitHub OAuth
GITHUB_CLIENT_ID=your_github_client_id_here
GITHUB_CLIENT_SECRET=your_github_client_secret_here
EOF

echo ".env file created successfully!"
echo ""

# ========================================
# Display summary
# ========================================
echo ""
echo "Password generation completed!"
echo ""
echo -e "\033[0;36mGenerated files:\033[0m"
echo "  • .env - Environment variables for all services"
echo ""
echo -e "\033[0;36mGenerated passwords:\033[0m"
echo "  • PostgreSQL: ${POSTGRES_PASSWORD:0:8}..."
echo "  • MySQL: ${MYSQL_PASSWORD:0:8}..."
echo "  • MongoDB: ${MONGO_INITDB_ROOT_PASSWORD:0:8}..."
echo "  • Redis: ${REDIS_PASSWORD:0:8}..."
echo "  • JWT Secret: ${JWT_SECRET:0:16}..."
echo "  • Encryption Key: ${ENCRYPTION_KEY:0:16}..."
echo ""
echo -e "\033[0;31mIMPORTANT SECURITY NOTES:\033[0m"
echo -e "\033[0;33m  • All passwords use alphanumeric characters (a-z, A-Z, 0-9)\033[0m"
echo -e "\033[0;33m  • Change OAuth client IDs and secrets in .env if needed\033[0m"
echo -e "\033[0;33m  • Keep .env file secure and never commit to version control\033[0m"
echo ""
echo -e "\033[0;36mNext steps:\033[0m"
echo "  1. Review and update OAuth settings in .env if needed"
echo "  2. Run: docker compose -f docker-compose.prod.yml up -d"
echo "  3. Access: http://localhost:8383"
echo ""