GitLab

admin only

This way the random secret is created on first run instead of docker build. We don't really want all standard imaages to share a password anymore than we want a static password.

Even though "User.email" is enforced as unique at signup, it is not a unique field in the database. Let's use "User.id" instead. This also makes it more difficult to do a session stealing attack.

Default docker installations should generate a random key instead of using a static secret that everyone can see.

Start by renaming variables to something more generic. This will give us a bit more flexibility as we look to other session management mechanisms.

Replace the shell with the uvicorn process, so it becomes PID 1 and receives the signals directly

Signed-off-by: lucasew <lucas59356@gmail.com>