latest version 0.3.0 broken

[imc67]

after the double latest update of today the app is broken:

Oct 02 12:56:20=> Healtheck error got response status 500
Oct 02 12:56:30I, [2023-10-02T10:56:30.040135 #1] INFO -- : [2b2b3477-a047-44c1-93ea-7340ba253989] {"method":"GET","path":"/","format":"html","controller":"DashboardController","action":"index","status":500,"allocations":1210,"duration":5.04,"view":0.0,"db":0.99,"fwd":"172.18.0.1"}
Oct 02 12:56:30F, [2023-10-02T10:56:30.041109 #1] FATAL -- : [2b2b3477-a047-44c1-93ea-7340ba253989]
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] ActionView::Template::Error (ActiveRecord::Encryption::Errors::Decryption):
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] 5: <meta property="og:title" content="DocuSeal | Open Source Document Filling and Signing">
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] 6: <meta property="og:description" content="Open source, self-hosted tool to streamline document filling and signing. Create custom PDF forms to complete and sign with an easy to use online tool.">
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] 7: <meta property="og:type" content="website">
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] 8: <meta property="og:url" content="<%= root_url %>">
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] 9: <meta property="og:site_name" content="DocuSeal">
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] 10: <meta property="og:image" content="<%= image_pack_url('images/preview.png') %>">
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] 11: <meta property="og:image:width" content="800">
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989]
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] lib/docuseal.rb:54:in `default_url_options'
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] app/controllers/application_controller.rb:30:in `default_url_options'
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] app/views/shared/_meta.html.erb:8
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] app/views/layouts/application.html.erb:7
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] app/controllers/dashboard_controller.rb:68:in `maybe_render_landing'
Oct 02 12:56:30[2b2b3477-a047-44c1-93ea-7340ba253989] lib/api_path_consider_json_middleware.rb:15:in `call'

[docuseal]

@girish https://git.cloudron.io/cloudron/docuseal-app/-/commit/40dbb6272dae9bdad11b8bd13f3032aadc25b86f#9dcf658ee8180c343527e6fa4612975d22036004_7_10

I think this line breaks DocuSeal for existing users. At DocuSeal secret key base is automatically generated by the app itself on the first run. With this new update a new key has been generated for users and so the old data that seats in the DB can't be decrypted with that new key.

Btw DocuSeal accept WORKDIR= env variable to specify where the app data should be stored (possibly /app/data ?) But setting this variable without moving all the data to a new folder will also break the app for existing users.

[girish]

@docuseal Is the automatically generated secret key saved somewhere?

I was trying to get the app to a stable state and saw that we don't generate secret key, which is possibly a security issue. We do this for other rails apps.

The app package is still 'unstable', so it's OK if things break for the sake of security.

[docuseal]

@girish autogenerated secret is stored in the docuseal.env file in the code folder by default.
Also the root code folder contains attachments folder with all files ever uploaded to the app.
Maybe a better solution would be to use WORKDIR=/app/data to store .env file and attached files there ?
It feels like generating a secret key base in the start.sh is not necessary since the app does that already.

[girish]

@docuseal thanks, I will adjust the package accordingly

[imc67]

Any update?

[girish]

I have removed the generation of the secret key.

[imc67]

Thanks! It works again!