From 3c0b4d2ebd73d4bb75ffc1ebc3928f8f7e632975 Mon Sep 17 00:00:00 2001
From: Moritz <moritz.m@local-it.org>
Date: Wed, 26 Aug 2026 15:56:16 +0200
Subject: [PATCH 1/2] fix enable_auto_updates exit code

---
 abra.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/abra.sh b/abra.sh
index c87ee52..1d703bb 100644
--- a/abra.sh
+++ b/abra.sh
@@ -46,7 +46,7 @@ enable_auto_updates(){
   wp "plugin uninstall disable-update-notifications --allow-root"
   wp "option delete disable_notification_setting --allow-root"
   wp "plugin auto-updates enable --all --allow-root"
-  wp "theme auto-updates enable --all --allow-root"
+  wp "theme auto-updates enable --all --allow-root" || true
 }
 
 disable_auto_updates(){

From 6ff565428c3b368da6f354003d2a8dc5f9d1cd27 Mon Sep 17 00:00:00 2001
From: Moritz <moritz.m@local-it.org>
Date: Tue, 8 Sep 2026 16:13:27 +0200
Subject: [PATCH 2/2] set admin password via secret

---
 .env.sample | 1 +
 abra.sh     | 2 +-
 compose.yml | 4 ++++
 3 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/.env.sample b/.env.sample
index d74bed7..bb1b5ac 100644
--- a/.env.sample
+++ b/.env.sample
@@ -38,6 +38,7 @@ LETS_ENCRYPT_ENV=production
 
 SECRET_DB_ROOT_PASSWORD_VERSION=v1
 SECRET_DB_PASSWORD_VERSION=v1
+SECRET_ADMIN_PASSWORD_VERSION=v1
 
 # Mostly for compatibility with existing database dumps...
 #WORDPRESS_TABLE_PREFIX=wp_
diff --git a/abra.sh b/abra.sh
index 1d703bb..e26e557 100644
--- a/abra.sh
+++ b/abra.sh
@@ -27,7 +27,7 @@ core_install(){
         ADMIN=akadmin
     fi
     chown www-data:www-data -R /var/www/html/wp-content
-    wp "core install --url=$DOMAIN --title=\"$TITLE\" --admin_user=$ADMIN --admin_email=$ADMIN_EMAIL --locale=$LOCALE --skip-email"
+    wp "core install --url=$DOMAIN --title=\"$TITLE\" --admin_user=$ADMIN --admin_password=\"\$(cat /run/secrets/admin_password)\" --admin_email=$ADMIN_EMAIL --locale=$LOCALE --skip-email"
     wp "language core install $LOCALE"
     wp "site switch-language $LOCALE"
     wp "rewrite structure '/%year%/%monthnum%/%day%/%postname%/'"
diff --git a/compose.yml b/compose.yml
index 994a843..9031893 100644
--- a/compose.yml
+++ b/compose.yml
@@ -25,6 +25,7 @@ services:
       COMPOSER:
     secrets:
       - db_password
+      - admin_password
     configs:
       - source: php_uploads_conf
         target: /usr/local/etc/php/conf.d/uploads.ini
@@ -101,6 +102,9 @@ secrets:
   db_password:
     external: true
     name: ${STACK_NAME}_db_password_${SECRET_DB_PASSWORD_VERSION}
+  admin_password:
+    external: true
+    name: ${STACK_NAME}_admin_password_${SECRET_ADMIN_PASSWORD_VERSION}
 
 configs:
   entrypoint_conf: