Repository files, collaboration, releases and project activity.
ARCHFORGE HISTORY
Blame · HOTFIX-ADMIN-1.0.1.md
Branch main · the Commit author is not necessarily a verified ArchForge account.
f1897d33c0archadmin2026-10-11
1 # ArchForge External Status 1.0.1 — Admin-wizard hotfixf1897d33c0archadmin2026-10-11
2 f1897d33c0archadmin2026-10-11
3 This fixes a problematic interaction between Node.js `readline` and the old `stty -echo` password prompt. It replaces the password prompt with a silent-output TTY reader, so the password is not echoed while typed.f1897d33c0archadmin2026-10-11
4 f1897d33c0archadmin2026-10-11
5 ## Restore admin setup after the v1.0.0 installer stopped midwayf1897d33c0archadmin2026-10-11
6 f1897d33c0archadmin2026-10-11
7 From your **updated Git checkout** on your **Debian 13 status VPS**, while logged in as root:f1897d33c0archadmin2026-10-11
8 f1897d33c0archadmin2026-10-11
9 ```bashf1897d33c0archadmin2026-10-11
10 cd ~/archforge-external-statusf1897d33c0archadmin2026-10-11
11 bash ./recover-admin.shf1897d33c0archadmin2026-10-11
12 ```f1897d33c0archadmin2026-10-11
13 f1897d33c0archadmin2026-10-11
14 If you are using a normal sudo user, use `sudo bash ./recover-admin.sh` instead. This command only replaces the installed CLI (admin wizard), then resumes admin creation. It **does not modify** `/etc/archforge-status/status.env`, existing admin accounts, or `/var/lib/archforge-status/status.db`; it does **not restart** your service.f1897d33c0archadmin2026-10-11
15 f1897d33c0archadmin2026-10-11
16 **IMPORTANT:** First upload the v1.0.1 project changes to your ArchForge Git repository, then run `git pull --ff-only` in your existing checkout, or upload/copy the files `src/cli.js` and `recover-admin.sh` into the checkout. You do **not** need to run `install.sh` again, and do **not** run `update.sh` as root. This dedicated recovery command works as root.f1897d33c0archadmin2026-10-11
17 f1897d33c0archadmin2026-10-11
18 If a previous admin exists, the CLI prints `An admin already exists` and leaves it untouched. When you see `New admin password`, type at least 12 characters and press Enter. **No characters, bullets, or asterisks will appear while typing**. Repeat when asked, then register the displayed TOTP secret with your authenticator and enter its six-digit code. Do not publish the secret or terminal screenshot showing it.f1897d33c0archadmin2026-10-11
19 f1897d33c0archadmin2026-10-11
20 ## Installations starting from 1.0.1f1897d33c0archadmin2026-10-11
21 f1897d33c0archadmin2026-10-11
22 If you run `sudo ./install.sh` on a server where External Status is already running, the script now invokes recovery only (no package reinstallation). Fresh installs use the fixed TTY prompt automatically.f1897d33c0archadmin2026-10-11
23 f1897d33c0archadmin2026-10-11
24 To check the service:f1897d33c0archadmin2026-10-11
25 f1897d33c0archadmin2026-10-11
26 ```bashf1897d33c0archadmin2026-10-11
27 systemctl is-active archforge-statusf1897d33c0archadmin2026-10-11
28 curl -fsS http://127.0.0.1:3000/healthzf1897d33c0archadmin2026-10-11
29 ```f1897d33c0archadmin2026-10-11
30 f1897d33c0archadmin2026-10-11
31 You can access the admin login at `https://status.archforge.nl/admin/login` after DNS, HTTPS and the service are working.f1897d33c0archadmin2026-10-11
32 f1897d33c0archadmin2026-10-11
33 ## Security notef1897d33c0archadmin2026-10-11
34 f1897d33c0archadmin2026-10-11
35 The v1.0.0 prompt could **display passwords in terminal logs** while typing. If you typed a real password at that prompt, use a **new, unique admin password** and do not reuse the old one elsewhere. If it was reused, change it in the other accounts as well.