# Changelog — ConsulDemocracy Cloudron Package

## 1.0.0 — 2026-09-06

- Initial package: build-from-source on ruby:3.4.10-trixie (upstream
  commit at package time; trimmed dev Dockerfile — no Chromium)
- postgresql + localstorage addons; Rails server on :3000
- Generated configs (database.yml / secrets.yml) under /app/data,
  regenerated each boot; persisted secret_key_base
- First-boot db:create/migrate/seed with marker + empty-DB verification
  (a stale marker against a fresh database re-seeds); gated delayed_job
  worker; in-container memcached; assets:precompile at start (the app's
  environment needs the DB, so precompile cannot run at build time)
- Platform OIDC wired into secrets.yml; `feature.oidc_login` auto-enabled
  on first boot when the provider is present; local admin seeded
  (admin@consul.dev — password change required on first login)

## Verification (2026-09-06)

Full-stack grind-stack test against ephemeral postgres: build green,
first boot ~5 min (migrate → seed [123 settings, admin] → OIDC enable →
precompile → delayed_job → Rails), homepage 200, login page renders the
`/users/auth/oidc` SSO button.