From d8b5dd5d108581276a1cddb1130e7b4646b7bc54 Mon Sep 17 00:00:00 2001
From: MickLesk <47820557+MickLesk@users.noreply.github.com>
Date: Thu, 17 Sep 2026 10:07:43 +0200
Subject: [PATCH] immichframe: set the admin password the new admin UI requires

immichFrame/ImmichFrame#698 added an admin UI that refuses to open
/admin unless IMMICHFRAME_ADMIN_PASSWORD is set, leaving users to edit
the unit by hand after an install or an upgrade from an older version.

Generate one, put it in the unit next to the other Environment lines,
and record it in ~/immichframe.creds the way the other scripts record
credentials. The update adds the line only when it is missing, so a
password already set by hand survives.
---
 ct/immichframe.sh              | 11 +++++++++++
 install/immichframe-install.sh |  6 ++++++
 2 files changed, 17 insertions(+)

diff --git a/ct/immichframe.sh b/ct/immichframe.sh
index 782152ee1..3ef69d573 100644
--- a/ct/immichframe.sh
+++ b/ct/immichframe.sh
@@ -79,6 +79,17 @@ function update_script() {
     restore_backup
     chown -R immichframe:immichframe /opt/immichframe
 
+    if ! grep -q '^Environment=IMMICHFRAME_ADMIN_PASSWORD=' /etc/systemd/system/immichframe.service; then
+      msg_info "Setting Admin Password"
+      ADMIN_PASSWORD=$(openssl rand -hex 16)
+      sed -i "/^Environment=DOTNET_CONTENTROOT=/a Environment=IMMICHFRAME_ADMIN_PASSWORD=${ADMIN_PASSWORD}" /etc/systemd/system/immichframe.service
+      {
+        echo "ImmichFrame Admin User: admin"
+        echo "ImmichFrame Admin Password: $ADMIN_PASSWORD"
+      } >>~/immichframe.creds
+      systemctl daemon-reload
+      msg_ok "Set Admin Password (see ~/immichframe.creds)"
+    fi
 
     msg_info "Starting Service"
     systemctl start immichframe
diff --git a/install/immichframe-install.sh b/install/immichframe-install.sh
index 4a1b384f2..e0e7f58e3 100644
--- a/install/immichframe-install.sh
+++ b/install/immichframe-install.sh
@@ -60,6 +60,11 @@ chown -R immichframe:immichframe /opt/immichframe
 msg_ok "Setup ImmichFrame"
 
 msg_info "Creating Service"
+ADMIN_PASSWORD=$(openssl rand -hex 16)
+{
+  echo "ImmichFrame Admin User: admin"
+  echo "ImmichFrame Admin Password: $ADMIN_PASSWORD"
+} >>~/immichframe.creds
 cat <<EOF >/etc/systemd/system/immichframe.service
 [Unit]
 Description=ImmichFrame Digital Photo Frame
@@ -74,6 +79,7 @@ ExecStart=/usr/bin/dotnet /opt/immichframe/ImmichFrame.WebApi.dll
 Environment=ASPNETCORE_URLS=http://0.0.0.0:8080
 Environment=ASPNETCORE_ENVIRONMENT=Production
 Environment=DOTNET_CONTENTROOT=/opt/immichframe
+Environment=IMMICHFRAME_ADMIN_PASSWORD=$ADMIN_PASSWORD
 Restart=always
 RestartSec=5
 StandardOutput=journal