Release v0.6.0

Add database-backed user management and password reset tooling.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

deployment/Dockerfile

@@ -71,12 +71,13 @@ WORKDIR /app/src
 # Copy application and static files (owned by webssh in one layer, no separate chown pass)
 COPY --chown=webssh:webssh src/ /app/src/
 COPY deployment/docker-entrypoint.sh /usr/local/bin/
+COPY deployment/scripts/password-reset /usr/local/bin/password-reset
 
 # Create .ssh directory for host keys
 RUN mkdir -p /app/src/.ssh && chown webssh:webssh /app/src/.ssh
 
 # Copy entrypoint
-RUN chmod +x /usr/local/bin/docker-entrypoint.sh
+RUN chmod +x /usr/local/bin/docker-entrypoint.sh /usr/local/bin/password-reset
 
 # Copy the Caddy binary from the official image
 COPY --from=caddy /usr/bin/caddy /usr/local/bin/caddy

deployment/docker-compose.yml

@@ -12,8 +12,8 @@ services:
       - TZ=Europe/Sofia
       - PYTHONUNBUFFERED=1
       - LOG_LEVEL=INFO
-      # Configure users: format is username:password,username2:password2
-      - WEBSSH_USERS=admin:admin
+      # For a one-time import from a legacy installation, configure user:password pairs:
+      # - WEBSSH_USERS=user1:pass1,user2:pass2
       # Max upload size, enforced by both Caddy and the backend (e.g. "30MB", "512KB")
       - MAX_UPLOAD_SIZE=30MB
       # Session Recording Configuration

deployment/scripts/docker-build-and-push.sh

@@ -7,7 +7,7 @@ set -e
 
 # Configuration
 IMAGE_NAME="danaildr/webssh"
-VERSION="0.5.1"
+VERSION="0.6.0"
 PLATFORMS="linux/amd64,linux/arm64,linux/arm/v7"
 
 # Colors

deployment/scripts/password-reset

@@ -0,0 +1,8 @@
+#!/bin/sh
+set -eu
+
+if [ "$(id -u)" -eq 0 ]; then
+    exec gosu webssh python /app/src/password_reset.py "$@"
+fi
+
+exec python /app/src/password_reset.py "$@"