From 55c5f2128ab18bb5b6fbb986998ca5e1308c1f6f Mon Sep 17 00:00:00 2001
From: Oliver Baer <75138893+mrwind-up-bird@users.noreply.github.com>
Date: Thu, 26 Feb 2026 15:18:58 +0100
Subject: [PATCH] fix(autofix): Weak random password generation fallback

---
 scripts/setup-vps.sh | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/scripts/setup-vps.sh b/scripts/setup-vps.sh
index 23b4310..63b5135 100755
--- a/scripts/setup-vps.sh
+++ b/scripts/setup-vps.sh
@@ -23,7 +23,12 @@ ufw default deny incoming
 ufw default allow outgoing
 ufw allow 22/tcp   # SSH
 ufw allow 80/tcp   # HTTP
-ufw allow 443/tcp  # HTTPS
+FERNET_KEY=$(docker run --rm python:3.11-slim python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())" 2>/dev/null || {
+    echo "ERROR: Failed to generate Fernet key using Docker. Please install Docker properly or generate the key manually." >&2
+    echo "To generate manually, run: python3 -c 'from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())'" >&2
+    echo "Then set ENCRYPTION_KEY in /opt/minirag/.env" >&2
+    exit 1
+})
 ufw --force enable
 
 echo "==> Creating minirag user and project directory..."