From 0a13e12a9d4b5336d784c0b58fbe91dc0db27450 Mon Sep 17 00:00:00 2001
From: al-lac <lackner.alex@gmail.com>
Date: Tue, 24 Dec 2024 01:55:05 +0100
Subject: [PATCH] Update pocketbase to version 0.23.12 and create initial
 superuser

---
 .../data/migrations/initial_superuser.js      | 22 +++++++++++++++++++
 pocketbase/docker-compose.yml                 |  5 +++--
 pocketbase/umbrel-app.yml                     | 19 +++++++++++-----
 3 files changed, 38 insertions(+), 8 deletions(-)
 create mode 100644 pocketbase/data/migrations/initial_superuser.js

diff --git a/pocketbase/data/migrations/initial_superuser.js b/pocketbase/data/migrations/initial_superuser.js
new file mode 100644
index 0000000000..51e6af96d3
--- /dev/null
+++ b/pocketbase/data/migrations/initial_superuser.js
@@ -0,0 +1,22 @@
+// https://pocketbase.io/docs/js-migrations/#creating-initial-superuser
+// pb_migrations/1687801090_initial_superuser.js
+
+migrate((app) => {
+  let superusers = app.findCollectionByNameOrId("_superusers")
+
+  let record = new Record(superusers)
+
+  // note: the values can be eventually loaded via $os.getenv(key)
+  // or from a special local config file
+  record.set("email", "umbrel@umbrel.local")
+  record.set("password", "umbrel-pocketbase")
+
+  app.save(record)
+}, (app) => { // optional revert operation
+  try {
+      let record = app.findAuthRecordByEmail("_superusers", "umbrel@umbrel.local")
+      app.delete(record)
+  } catch {
+      // silent errors (probably already deleted)
+  }
+})
diff --git a/pocketbase/docker-compose.yml b/pocketbase/docker-compose.yml
index a444e93e65..35bb23217a 100644
--- a/pocketbase/docker-compose.yml
+++ b/pocketbase/docker-compose.yml
@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_ADD: "false"
   
   app:
-    image: ghcr.io/muchobien/pocketbase:0.23.7@sha256:782f35e9f518f8b12152dca355de666f54002a3822765ff518dbcb21b0f8d0e8
+    image: ghcr.io/muchobien/pocketbase:0.23.12@sha256:ceaa734390fd0a83ac795fe99e22b6481bc757b45ef016234f2b56ea43fc9209
     # pocketbase needs to run as root
     # user: "1000:1000"
     restart: on-failure
@@ -16,4 +16,5 @@ services:
     volumes:
       - ${APP_DATA_DIR}/data/data:/pb_data
       - ${APP_DATA_DIR}/data/public:/pb_public
-      - ${APP_DATA_DIR}/data/hooks:/pb_hooks
\ No newline at end of file
+      - ${APP_DATA_DIR}/data/hooks:/pb_hooks
+      - ${APP_DATA_DIR}/data/migrations:/pb_migrations
diff --git a/pocketbase/umbrel-app.yml b/pocketbase/umbrel-app.yml
index b3785eed38..1f8ab00b92 100644
--- a/pocketbase/umbrel-app.yml
+++ b/pocketbase/umbrel-app.yml
@@ -3,7 +3,7 @@ id: pocketbase
 name: PocketBase
 tagline: Open Source backend for your next SaaS and Mobile app in 1 file
 category: developer
-version: "0.23.7"
+version: "0.23.12"
 port: 5400
 description: >-
   PocketBase is an open source backend consisting of embedded database (SQLite) with realtime subscriptions, built-in auth management, convenient dashboard UI and simple REST-ish API.
@@ -29,6 +29,8 @@ description: >-
   Use as a standalone app OR as a framework, that you can extend via Go and JavaScript hooks to create your own custom portable backend.
 developer: PocketBase
 website: https://pocketbase.io/
+defaultUsername: "umbrel@umbrel.local"
+defaultPassword: "umbrel-pocketbase"
 submitter: Sharknoon
 submission: https://github.com/getumbrel/umbrel-apps/pull/1082
 repo: https://github.com/pocketbase/pocketbase
@@ -41,10 +43,15 @@ gallery:
 path: /_/
 dependencies: []
 releaseNotes: >-
-  This release includes improvements to error handling and stability:
-    - Fixed issues with JavaScript error handling
-    - Enhanced system reliability
-    - Improved overall performance
+  ⚠️ This release includes a security fix for email template handling. If you use custom mail templates with user-provided content, please update immediately.
 
 
-  Full release notes are found at https://github.com/pocketbase/pocketbase/releases
\ No newline at end of file
+  Key improvements in this release:
+    - Fixed a security vulnerability in email template handling
+    - Enhanced system stability and performance
+    - Improved error handling
+    - Added version mismatch warning logs for SQLite dependencies
+    - Removed file size restrictions for backup uploads
+
+
+  Full release notes are found at https://github.com/pocketbase/pocketbase/releases