fix: never replace an unreadable database file with an empty one

2026-11-12 16:47:05 +00:00 · 2026-11-09 01:28:37 +07:00
parent 6b06059411
commit 97fb59a282
6 changed files with 272 additions and 54 deletions
@@ -159,6 +159,12 @@
      "default": "true",
      "description": "Encrypt the SQLite file at rest. Set false only if something else already encrypts the disk."
    },
+    {
+      "name": "ALLOW_UNREADABLE_DB_RESET",
+      "group": "database",
+      "default": "false",
+      "description": "Discard an unrecognized encrypted SQLite file and start fresh. Keep a recovery copy first. Leave unset to refuse startup and preserve the existing file."
+    },
    {
      "name": "DB_FILE_KEY",
      "group": "database",