From 629b0a8b4105728e201f5a6edb1b1120641521b8 Mon Sep 17 00:00:00 2001
From: Perflyst <mail@perflyst.de>
Date: Mon, 21 Jan 2019 19:17:07 +0100
Subject: [PATCH] Use random password for database user

Fix #298
---
 config/config.yml | 2 +-
 setup.sh          | 7 ++++++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/config/config.yml b/config/config.yml
index f981a398..e5a352b5 100644
--- a/config/config.yml
+++ b/config/config.yml
@@ -4,7 +4,7 @@ channel_threads: 1
 feed_threads: 1
 db:
   user: kemal
-  password: kemal
+  password: replacethispassword
   host: localhost
   port: 5432
   dbname: invidious
diff --git a/setup.sh b/setup.sh
index 7b708897..1a66b8fc 100755
--- a/setup.sh
+++ b/setup.sh
@@ -1,10 +1,15 @@
 #!/bin/bash
 
+dbpass=$(openssl rand -hex 20)
+
 createdb invidious
 #createuser kemal
-psql -c "CREATE USER kemal WITH PASSWORD 'kemal';"
+psql -c "CREATE USER kemal WITH PASSWORD '$dbpass';"
 psql invidious < config/sql/channels.sql
 psql invidious < config/sql/videos.sql
 psql invidious < config/sql/channel_videos.sql
 psql invidious < config/sql/users.sql
 psql invidious < config/sql/nonces.sql
+
+# change password in config file
+sed -i "s/replacethispassword/$dbpass/g" config/config.yml