7 commits

Author	SHA1	Message	Date
Simon	77012f10ca	refactor: harden seed only once implementation	2026-03-16 19:20:30 +01:00
Simon	c40f3135a1	feat: only run all seeds on first startup	2026-03-16 17:52:59 +01:00
Moritz	d032f1ca0c	Run bootstrap seeds in production; add RUN_DEV_SEEDS support	2026-03-09 15:16:02 +01:00
Moritz	ad54b0c462	Release.seed_admin: ensure app started when run via bin/mv eval ... Application.ensure_all_started(:mv) so Ash/Telemetry work (ETS table exists). Fixes Unknown Error / telemetry_handler_table in production entrypoint.	2026-02-04 21:33:41 +01:00
Moritz	c5f1fdce0a	Code-review follow-ups: policy, docs, seed_admin behaviour ... - Use OidcRoleSyncContext for set_role_from_oidc_sync; document JWT peek risk. - seed_admin without password sets Admin role on existing user (OIDC-only); update docs and test. - Fix DE translation for 'access this page'; add get? true comment in User.	2026-02-04 19:44:43 +01:00
Moritz	e065b39ed4	Add Mv.Release.seed_admin for admin bootstrap from ENV ... Creates/updates admin user from ADMIN_EMAIL and ADMIN_PASSWORD or ADMIN_PASSWORD_FILE. Idempotent; no fallback password in production. Called from docker entrypoint and seeds.	2026-02-04 18:13:30 +01:00
Rafael Epplée	dce8fbc232	Add Release scripts & Dockerfile	2025-05-22 02:12:20 +02:00