feat: bootstrap SuperAdmin from env and lock one-time seeding

Production creates the SuperAdmin from env credentials, and dashboard seeding is authenticated, SuperAdmin-only, and locked after the first run.
This commit is contained in:
2026-08-14 23:23:06 +03:30
parent 3ca098b74d
commit 35704409ec
13 changed files with 251 additions and 34 deletions
+6 -4
View File
@@ -47,9 +47,11 @@ SMS_TEMPLATE_CLASS_REMINDER=
# Bale Messenger Bot Token
BALE_BOT_TOKEN=mock_bale_bot_token
# SuperAdmin Seed Credentials
SUPERADMIN_USERNAME=superadmin
SUPERADMIN_PASSWORD=SuperAdminSecret123!
SUPERADMIN_EMAIL=admin@institution.com
# SuperAdmin bootstrap (created automatically in production)
# Set SUPERADMIN_ENABLED=false to deactivate the bootstrap SuperAdmin and block login
SUPERADMIN_ENABLED=true
SUPERADMIN_USERNAME=
SUPERADMIN_PASSWORD=
SUPERADMIN_EMAIL=
SUPERADMIN_NATIONAL_ID=0000000000
SUPERADMIN_PHONE=09000000000