Продакшн рефактор без легаси

orchestrator/src/commands/reconfigure.ts

@@ -46,13 +46,13 @@ export async function reconfigure(options: ReconfigureOptions): Promise<void> {
   const configRaw = await readText(options.sourceConfigPath);
   const config = parseRuntimeEnv(configRaw);
 
-  const context: ReconfigureContext & { packageVersion: string; packageBuildId: string; installDate: string; hysteriaAuthPassword: string; hysteriaVersion: string } = {
+  const context: ReconfigureContext = {
+    mode: "reconfigure",
     options,
     config,
     packageVersion: await readPackageValue(options.packageDir, "package.version", "unknown"),
     packageBuildId: await readPackageValue(options.packageDir, "package.build_id", "unknown"),
     installDate: new Date().toISOString(),
-    hysteriaAuthPassword: "managed-by-ui-auth",
     hysteriaVersion: await readInstalledHysteriaVersion()
   };
 
@@ -81,6 +81,8 @@ export async function reconfigure(options: ReconfigureOptions): Promise<void> {
     await applyFirewall(context);
     step("write env artifacts");
     await writeText(options.runtimeConfigPath, renderRuntimeEnv(config), 0o600);
+    await runVisible`chown root:root ${options.runtimeConfigPath}`;
+    await runVisible`chmod 0600 ${options.runtimeConfigPath}`;
     await writePostInstallEnv(context);
     step("smoke checks");
     await smoke(context);