poc2_worked

scripts/first-run.sh

@@ -15,10 +15,22 @@ if [ ! -c /dev/net/tun ]; then
   echo "/dev/net/tun is missing; TAP mode requires a Linux host with TUN/TAP enabled" >&2
   exit 4
 fi
-[ -f .env ] || cp .env.example .env
+if [ ! -f .env ]; then
+  cp .env.example .env
+  ADMIN_PASSWORD_GENERATED="$(od -An -N24 -tx1 /dev/urandom | tr -d ' \n')"
+  sed -i "s/^ADMIN_PASSWORD=.*/ADMIN_PASSWORD=${ADMIN_PASSWORD_GENERATED}/" .env
+  chmod 0600 .env
+  echo "[first-run] generated dashboard password in .env (ADMIN_USERNAME=admin)"
+fi
 
-echo "[first-run] building and starting IDS"
-docker compose up -d --build
+echo "[first-run] building IDS image"
+docker compose build
+
+echo "[first-run] migrating legacy bind-mount data when needed"
+./scripts/migrate-docker-volumes.sh
+
+echo "[first-run] starting IDS"
+docker compose up -d
 
 echo "[first-run] running end-to-end TZSP test"
 ./scripts/selftest.sh