From fba143d918476aefd2b1c0e18c784ec01de79d6f Mon Sep 17 00:00:00 2001
From: Juergen Kunz <juergen@foss.global>
Date: Fri, 8 May 2026 16:12:22 +0000
Subject: [PATCH] fix: update onebox installer credentials output

---
 changelog.md | 6 ++++++
 deno.json    | 2 +-
 install.sh   | 2 +-
 package.json | 2 +-
 4 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/changelog.md b/changelog.md
index 39cc80a..21b8e89 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## 2026-05-08 - 1.24.4 - fix(installer)
+
+avoid documenting a hardcoded initial admin password for fresh installs
+
+- update installer output to point operators to the service logs or `ONEBOX_ADMIN_PASSWORD` for initial credentials
+
 ## 2026-05-08 - 1.24.3 - fix(runtime)
 
 upgrade runtime dependencies and harden registry/shutdown behavior
diff --git a/deno.json b/deno.json
index d54a04d..929324a 100644
--- a/deno.json
+++ b/deno.json
@@ -1,6 +1,6 @@
 {
   "name": "@serve.zone/onebox",
-  "version": "1.24.3",
+  "version": "1.24.4",
   "exports": "./mod.ts",
   "tasks": {
     "test": "deno test --allow-all test/",
diff --git a/install.sh b/install.sh
index d92bb6f..f89230e 100755
--- a/install.sh
+++ b/install.sh
@@ -305,6 +305,6 @@ else
   echo "     onebox service add myapp --image nginx:latest --domain app.example.com"
   echo ""
   echo "  Web UI: http://localhost:3000"
-  echo "  Default credentials: admin / admin"
+  echo "  Initial admin credentials are written to the service logs unless ONEBOX_ADMIN_PASSWORD is set."
 fi
 echo ""
diff --git a/package.json b/package.json
index 99d53ac..632edbe 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@serve.zone/onebox",
-  "version": "1.24.3",
+  "version": "1.24.4",
   "description": "Self-hosted container platform with automatic SSL and DNS - a mini Heroku for single servers",
   "main": "mod.ts",
   "type": "module",