From a8cd528f5a3c3002c09f801e1786bd92110f04e9 Mon Sep 17 00:00:00 2001
From: Schalli <kschaller@ctl.de>
Date: Mon, 29 Jun 2026 16:34:10 +0200
Subject: [PATCH] fix(prod): default TESSERA_FORCE_CHANGE to false

Admin should not be forced to change password on every fresh deploy.
Opt-in via TESSERA_FORCE_CHANGE=true in .env if needed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 docker-compose.prod.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 59fc70f..2c16f70 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -33,7 +33,7 @@ services:
       TESSERA_ADMIN_USER: ${TESSERA_ADMIN_USER:-admin}
       TESSERA_ADMIN_EMAIL: ${TESSERA_ADMIN_EMAIL}
       TESSERA_ADMIN_PASSWORD: ${TESSERA_ADMIN_PASSWORD}
-      TESSERA_FORCE_CHANGE: ${TESSERA_FORCE_CHANGE:-true}
+      TESSERA_FORCE_CHANGE: ${TESSERA_FORCE_CHANGE:-false}
       TESSERA_SMTP_HOST: ${TESSERA_SMTP_HOST:-}
       TESSERA_SMTP_PORT: ${TESSERA_SMTP_PORT:-587}
       TESSERA_SMTP_SECURE: ${TESSERA_SMTP_SECURE:-false}