15 lines
796 B
Bash
15 lines
796 B
Bash
|
#!/bin/bash
|
||
|
|
# Fix 1: Ta bort hårdkodad JWT secret från period-workflow.mjs
|
||
|
|
|
||
|
|
FILE="/opt/amos/services/aamos-ledger/period-workflow.mjs"
|
||
|
|
BAK="${FILE}.bak-$(date +%s)"
|
||
|
|
|
||
|
|
# Skapa backup
|
||
|
|
cp "$FILE" "$BAK"
|
||
|
|
|
||
|
|
# Ersätt rad 24 (hårdkodad secret) med env-only + validering
|
||
|
|
sed -i "s/const _JWT_SECRET = process.env.AMOS_JWT_SECRET || process.env.JWT_SECRET || 'y8Lf__vnWpImX2lxyPo3R0WYFEgCrtmQ3r8FcCwKjAWTNsLBKhaqIrP5oGAdt31E';/const _JWT_SECRET = process.env.AMOS_JWT_SECRET || process.env.JWT_SECRET;\n\n\/\/ Kasta fel om JWT_SECRET saknas i production\nif (process.env.NODE_ENV === 'production' \&\& !_JWT_SECRET \&\& !_ledgerPrivKey) {\n throw new Error('AMOS_JWT_SECRET eller JWT_SECRET måste sättas i production');\n}/" "$FILE"
|
||
|
|
|
||
|
|
echo "Backup: $BAK"
|
||
|
|
echo "Fix applicerad på period-workflow.mjs"
|